ATT&CK technique
View on MITRE ATT&CK →
T1030
Data Transfer Size Limits
Exfiltration
9 detections found
Detection rules
| Source | Rule | Status | Updated |
|---|---|---|---|
| elastic | GenAI Process Performing Encoding/Chunking Prior to Network Activity | production | 2026-09-25 |
| elastic | Potential Data Splitting Detected | production | 2026-09-18 |
| splunk | MacOS Data Chunking | production | 2026-09-01 |
| splunk | Linux Auditd Data Transfer Size Limits Via Split Syscall | production | 2026-05-13 |
| splunk | Linux Auditd Data Transfer Size Limits Via Split | production | 2026-05-13 |
| sigma | Split A File Into Pieces - Linux | test | 2022-11-28 |
| sigma | Split A File Into Pieces | test | 2021-11-27 |
| sentinel | Time series anomaly detection for total volume of traffic | Scheduled | — |
| sentinel | Time series anomaly for data size transferred to public internet | Scheduled | — |