Data & analysis skills

Validate data quality in market analysis documents and blog articles before publication. Use when checking for price scale inconsistencies (ETF vs futures), instrument notation errors, date/day-of-week mismatches,…

Data are managed consistent with the organization's risk strategy to protect the confidentiality, integrity, and availability of information

Adversaries may perform data destruction over the course of an operation.

Adversaries may target and collect data from information repositories.

Adversaries may obfuscate command and control traffic to make it more difficult to detect.

Adversaries may add junk data to protocols used for command and control to make detection more difficult.

Adversaries may search local system sources, such as file systems, configuration files, local databases, virtual machine files, or process memory, to find files of interest and sensitive data prior...

Adversaries may search connected removable media on computers they have compromised to find files of interest.

An adversary may exfiltrate data in fixed size chunks instead of whole files or limit packet sizes below certain thresholds.

Adversaries may search network shares on computers they have compromised to find files of interest.

Adversaries may stage collected data in a central location or directory prior to Exfiltration.

Adversaries may stage collected data in a central location or directory on the local system prior to Exfiltration.

Adversaries may stage data collected from multiple systems in a central location or directory on one system prior to Exfiltration.

Adversaries may collect data stored in the clipboard from users copying information within or between applications.

Adversaries may encode data to make the content of command and control traffic more difficult to detect.

Adversaries may leverage information repositories to mine valuable information.

Adversaries may try to access and collect application data resident on the device.

Adversaries may abuse clipboard manager APIs to obtain sensitive information copied to the device clipboard.

An adversary may encrypt files stored on a mobile device to prevent the user from accessing them.

Adversaries may encrypt data on target systems or on large numbers of systems in a network to interrupt availability to system and network resources.

Adversaries may access data from cloud storage.

Adversaries may compress and/or encrypt data that is collected prior to exfiltration.

Adversaries may search local system sources, such as file systems or local databases, to find files of interest and sensitive data prior to exfiltration.

Adversaries may exfiltrate data by transferring the data, including through sharing/syncing and creating backups of cloud environments, to another cloud account they control on the same service.