DETECTION OVERVIEW
Risk Factors
Attackers frequently seek valuable data to steal, and data can be easily transferred without advanced tools or techniques. After valuable data is successfully exfiltrated, there can be significant negative effects on the reputation and revenue of an organization.
The system might change the risk score for this detection.
Kill Chain
Risk Score
83
Attackers often target valuable data to steal, such as sensitive customer data, financial information, or trade secrets. Data exfiltration is the transfer of valuable data to unauthorized users outside of the network. Data can be exfiltrated by employees with authorized access to critical assets, or by attackers who gain unauthorized access to critical assets through malware or an exploit. Large amounts of data are often transferred outside of the network over protocols such as HTTP, SSH, FTP, or SMTP. However, attackers are more frequently encrypting transferred data to hide their activity.