Domain | ID | Name | Use | |
---|---|---|---|---|
Enterprise | T1197 | BITS Jobs |
BITSAdmin can be used to create BITS Jobs to launch a malicious process.[2] |
|
Enterprise | T1048 | .003 | Exfiltration Over Alternative Protocol: Exfiltration Over Unencrypted Non-C2 Protocol |
BITSAdmin can be used to create BITS Jobs to upload files from a compromised host.[1] |
Enterprise | T1105 | Ingress Tool Transfer |
BITSAdmin can be used to create BITS Jobs to upload and/or download files.[1] |
|
Enterprise | T1570 | Lateral Tool Transfer |
BITSAdmin can be used to create BITS Jobs to upload and/or download files from SMB file servers.[3] |
ID | Name | References |
---|---|---|
G0102 | Wizard Spider | |
G0096 | APT41 | |
G1001 | HEXANE | |
G0065 | Leviathan | |
G0081 | Tropic Trooper | |
G0137 | Ferocious Kitten |