Opening Forensia workspaceacquiring
Loading the current evidence view. Navigation and account controls remain available.
Loading recent evidenceacquiring
ATT&CK knowledge
Loading the current evidence view. Navigation and account controls remain available.
Tactics: collection
4
known groups
2
software
514
corpus matches
about
Adversaries may target user email to collect sensitive information. Emails may contain sensitive data, including trade secrets or personal information, that can prove valuable to adversaries. Emails may also contain details of ongoing incident response operations, which may allow adversaries to adjust their techniques in order to maintain persistence or evade defenses. Adversaries can collect or forward email from mail servers or clients.
used by actors
4 known groups
software
2 malware & tools implement this
corpus indicators tagged T1114
514 carry this technique
A shared-technique signal for hunting: each row resolves to its own verdict. Not attribution to any one group.
showing top 30 by severity of 514