MBCProject-mbc-markdown/collection

ID	M9003

Collection

Behaviors that identify and gather information, such as sensitive files, from a target network prior to exfiltration. This objective includes locations on a system or network where the malware may look for information to exfiltrate.

• Access Call Log T1433
• Access Sensitive Data or Credentials in Files T1409
• Audio Capture T1123
• Automated Collection T1119
• Capture SMS Message T1412
• Clipboard Data T1115
• Data from Local System T1005
• Data from Network Shared Drive T1039
• Data from Removable Media T1025
• Data Staged T1074
• Email Collection T1114
• Input Capture T1056
• Location Tracking T1430
• Man in the Browser T1185
• Microphone or Camera Capture T1429
• Screen Capture T1113
• Video Capture T1125