ATT&CK technique
View on MITRE ATT&CK →
T1011
Exfiltration Over Other Network Medium
Exfiltration
2 detections found
Detection rules
| Source | Rule | Status | Updated |
|---|---|---|---|
| elastic | Spike in Bytes Sent to an External Device via Airdrop | production | 2026-09-18 |
| splunk | Windows Network Connection From Program In Suspect Location | production | 2026-05-13 |