BIOC
Informational
✕
BitTorrent P2P file sharing
The host used BitTorrent for P2P file sharing (according to the App-ID), which is typically not allowed in corporate networks and may be used to exfiltrate information.
- Module:
- Platform Analytics
- Agent event type:
- Dml connection
- Category:
- Exfiltration
- Status:
- Enabled
ATT&CK tactics: Exfiltration (TA0010)
ATT&CK techniques: Exfiltration Over Alternative Protocol (T1048)
Indicator:
Network Connections app id contains *bittorrent*
Preventable: no