T1586.003 Cloud Accounts

Adversaries may compromise cloud accounts that can be used during targeting. Adversaries can use compromised cloud accounts to further their operations, including leveraging cloud storage services such as Dropbox, Microsoft OneDrive, or AWS S3 buckets for [Exfiltration to Cloud Storage](https://attack.mitre.org/techniques/T1567/002) or to [Upload…

Ficha en MITRE ATT&CK ↗

Reglas de SigmaHQ · Detection Rule License 1.1. Técnica de MITRE ATT&CK®.