ATT&CK technique
View on MITRE ATT&CK →
T1560
Archive Collected Data
Collection
13 detections found
Detection rules
| Source | Rule | Status | Updated |
|---|---|---|---|
| elastic | GenAI Process Performing Encoding/Chunking Prior to Network Activity | production | 2026-09-25 |
| elastic | Sensitive Files Compression Inside A Container | production | 2026-09-18 |
| elastic | Sensitive File Compression Detected via Defend for Containers | production | 2026-09-18 |
| elastic | Sensitive Files Compression | production | 2026-09-18 |
| elastic | Sensitive File Access followed by Compression | production | 2026-09-18 |
| elastic | Encrypting Files with WinRar or 7z | production | 2026-09-18 |
| splunk | Windows Archived Collected Data In TEMP Folder | production | 2026-05-13 |
| splunk | Detect Certipy File Modifications | production | 2026-05-13 |
| splunk | Windows Archive Collected Data via Powershell | production | 2026-05-13 |
| sigma | Compressed File Creation Via Tar.EXE | test | 2023-12-19 |
| sigma | Compressed File Extraction Via Tar.EXE | test | 2023-12-19 |
| sigma | Compress-Archive Cmdlet Execution | test | 2023-12-15 |
| sigma | Conti NTDS Exfiltration Command | test | 2022-10-09 |