| Technique | Procedure example |
|---|---|
| T1048.003 Exfiltration Over Unencrypted Non-C2 Protocol |
BITSAdmin can be used to create BITS Jobs to upload files from a compromised host. |
| T1105 Ingress Tool Transfer |
BITSAdmin can be used to create BITS Jobs to upload and/or download files. |
| T1197 BITS Jobs |
BITSAdmin can be used to create BITS Jobs to launch a malicious process. |
| T1570 Lateral Tool Transfer |
BITSAdmin can be used to create BITS Jobs to upload and/or download files from SMB file servers. |
None recorded.
Data from MITRE ATT&CK® (Enterprise). ATT&CK® is a registered trademark of The MITRE Corporation.
