Insider Threat Matrix™Insider Threat Matrix™
  • ID: PR025.004
  • Created: 06th April 2026
  • Updated: 06th April 2026
  • Contributor: The ITM Team

File Download via Cloud Storage Synchronization

The subject retrieves files by syncing with cloud storage platforms such as OneDrive, Google Drive, or Dropbox. Files may be selectively synced or fully mirrored to the endpoint.

 

This method blends with legitimate enterprise workflows and may evade traditional download detection mechanisms, especially where cloud services are sanctioned. It also enables large-scale or continuous ingestion of data with minimal user interaction.