GCP bigquery.jobs.insert
Submits a BigQuery query, load, extract, or copy job.
T1537: Transfer Data to Cloud Account
T1537: Transfer Data to Cloud Account
Adversaries may exfiltrate data by transferring the data, including through sharing/syncing and creating backups of cloud environments, to another cloud account they control on the same service.
View on MITRE ATT&CK →GCP cloudsql.instances.export
Requests a Cloud SQL export to Cloud Storage.
Azure CopyBlob
Requests a server-side copy of an Azure blob.
AWS CopyObject
Copies an S3 object to another key or bucket.
Azure Microsoft.Sql/servers/databases/export/action
Requests export of Azure SQL Database schema and data to a BACPAC in Blob Storage.
AWS ModifyDBSnapshotAttribute
Changes sharing attributes of a manual RDS DB snapshot.
AWS ModifyImageAttribute
Changes an AMI attribute, including launch permissions for other accounts.
AWS ModifySnapshotAttribute
Changes EBS snapshot attributes, including volume-creation permissions.
AWS PutBucketPolicy
Creates or replaces an S3 bucket resource policy.
AWS PutBucketReplication
Creates or replaces an S3 bucket replication configuration.
AWS SharedSnapshotCopyInitiated
Service event indicating use of a shared EBS snapshot to initiate a copy.
AWS SharedSnapshotVolumeCreated
Service event indicating use of a shared EBS snapshot to create a volume.
AWS StartExportTask
Starts an RDS data export to Amazon S3.