Data obfuscation is the act of deliberately obscuring or disguising data to avoid detection and/or hinder forensic analysis. A subject may obscure data in preparation to exfiltrate the data.

Subsections (3)

ID	Name	Description
PR020.003	Misclassification of Sensitivity Labels	The subject intentionally misclassifies the sensitivity label of a file in an attempt to bypass DLP or other security controls.
PR020.002	Modification of Sensitivity Labels	The subject modifies or downgrades the sensitivity label of a file in an attempt to bypass DLP or other security controls.
PR020.001	Renaming Files or Changing File Extensions	A subject may rename a file to obscure the content of the file or change the file extension to hide the file type. This can aid in avoiding suspicion and bypassing certain security filers and endpoint monitoring tools. For example, renaming a sensitive document from FinancialReport.docx to Recipes.txt before copying it to a USB mass storage device.

Detections (3)