diff --git a/exfiltration/README.md b/exfiltration/README.md index e4f58a2..e252c5a 100644 --- a/exfiltration/README.md +++ b/exfiltration/README.md @@ -7,7 +7,7 @@ Behaviors that steal data from the system on which it executes. This includes st * **Automated Exfiltration** [E1020](https://github.com/MBCProject/mbc-markdown/blob/master/exfiltration/auto-exfiltrate.md) * **Data Compressed** [T1002](https://github.com/MBCProject/mbc-markdown/blob/master/exfiltration/data-compress.md) -* **Data Obfuscated** [E1022](https://github.com/MBCProject/mbc-markdown/blob/master/exfiltration/data-obfuscated.md) +* **Data Encrypted** [E1022](https://github.com/MBCProject/mbc-markdown/blob/master/exfiltration/data-encrypted.md) * **Exfiltration Over Alternative Protocol** [T1048](https://github.com/MBCProject/mbc-markdown/blob/master/exfiltration/exfil-over-alternative-protocol.md) * **Exfiltration Over Command and Control Channel** [T1041](https://github.com/MBCProject/mbc-markdown/blob/master/exfiltration/exfil-over-c2-channel.md) * **Exfiltration Over Other Network Medium** [T1011](https://github.com/MBCProject/mbc-markdown/blob/master/exfiltration/exfil-over-other-network-medium.md) diff --git a/exfiltration/data-obfuscated.md b/exfiltration/data-encrypted.md similarity index 88% rename from exfiltration/data-obfuscated.md rename to exfiltration/data-encrypted.md index b1805bc..1006ffe 100644 --- a/exfiltration/data-obfuscated.md +++ b/exfiltration/data-encrypted.md @@ -5,9 +5,9 @@ |**Related ATT&CK Technique(s)**|[Data Encrypted](https://attack.mitre.org/techniques/T1022/)| -Data Obfuscated -=============== -Malware may obfuscate data before exfiltration. +Data Encrypted +============== +Malware may obfuscate data via encryption or encoding before exfiltration. **See ATT&CK Technique:** [**Data Encrypted**](https://attack.mitre.org/techniques/T1022/).