Analytics BIOC
Informational
✕
Rare Unix process divided files by size
A file was divided into sub-files by size limit by a rare process.
- Module:
- Platform Analytics
- Data source:
- XDR Agent
ATT&CK tactics: Exfiltration (TA0010)
ATT&CK techniques: Data Transfer Size Limits (T1030)
Attacker's goals:
This may assist an attacker to exfiltrate sensitive information.
Investigative actions:
Check if the user normally uses this capability. Check if this capability is used often on this endpoint.
- Test period:
- N/A (single event)
- Deduplication:
- 1 Day