Refer to the exhibit.
The Security Operations team is reviewing firewall logs and decrypts this HTTP request from one of the finance team members’ endpoints.
Which Cyber Kill Chain stage does this evidence indicate?
Exfiltration is the transfer of collected data from a compromised endpoint to an external destination. The command identifies a local document file and an HTTPS destination to which it is to be sent.
Community Discussion