Bulk File Download

A subject downloads a large collection of organizational files in preparation for unauthorized retention, disclosure, or other misuse. The activity may involve retrieving entire folders, document libraries, repositories, or substantial portions of an accessible file collection. The subject may perform a single batch download or a series of related downloads that collectively assemble the targeted material. Files may be retrieved individually or delivered together within an archive.

The behavior concerns the scale and scope of collection rather than the tool or transfer method used. Investigators should assess the distinct files retrieved, their sensitivity, the proportion of the source collection obtained, the destination, and the relationship to the subject’s assigned responsibilities and approved tasks. A high file count, large transfer size, or departure from established download patterns does not independently establish preparation for an infringement. Successful retrieval should be distinguished from selection, attempted download, or generation of an export that was never retrieved.