🕵️ How to Detect Data Exfiltration with Elastic SIEM: SOC Analyst Hands-On Lab | Hunt Forward Lab #007

Hunt Forward Lab #007 — Threat Hunting for Bulk File Transfer & Archive Creation | MITRE ATT&CK T1039, T1560.001, T1048.002🔬 Difficulty: Intermediate — Estimated Time: 45–60 minutes 🗂️ MITRE ATT&CK: T1039 / T1560.001 / T1048.002 — Data from Network Shared Drive / Archive via Utility / Exfiltration Over Asymmetric Encrypted...