Data Transfer Size Limits (T1030)

Tactic: Exfiltration · Platforms: Linux, macOS, Windows, ESXi

The interactive view maps 1 detection strategy, 1 mitigation, 5 threat groups, 14 software entries, 2 campaigns to this technique, alongside D3FEND countermeasures and data-component coverage.

Overview

An adversary may exfiltrate data in fixed size chunks instead of whole files or limit packet sizes below certain thresholds. This approach may be used to avoid triggering network data transfer threshold alerts.

Explore

• Open T1030 in the interactive ATT&CK matrix
• ATT&CK Intelligence View guide
• Official MITRE ATT&CK entry for T1030
• Sigma detection rules for MITRE ATT&CK
• Built by Shahrukh Khan