T1213.006: Databases

T1213.006: Databases

Adversaries may leverage databases to mine valuable information. These databases may be hosted on-premises or in the cloud (both in platform-as-a-service and software-as-a-service environments).

View on MITRE ATT&CK →

GCP bigquery.jobs.insert

Submits a BigQuery query, load, extract, or copy job.

Cloud Service: GCP - BigQuery

Tactics:

Collection Exfiltration

Techniques:

T1213.006T1537

Tags:

GCP BigQuery

GCP cloudsql.instances.export

Requests a Cloud SQL export to Cloud Storage.

Cloud Service: GCP - Cloud SQL

Tactics:

Exfiltration Collection

Techniques:

T1537T1213.006

Tags:

GCP Cloud SQL

Azure Microsoft.Sql/servers/databases/export/action

Requests export of Azure SQL Database schema and data to a BACPAC in Blob Storage.

Cloud Service: Azure - Azure SQL

Tactics:

Collection Exfiltration

Techniques:

T1213.006T1537

Tags:

Azure Azure SQL