ITM is an open framework - Submit your contributions now.

Insider Threat Matrix™Insider Threat Matrix™
  • ID: IF002.003
  • Created: 31st May 2024
  • Updated: 14th June 2024
  • Contributor: The ITM Team

Exfiltration via New Internal Drive

A subject exfiltrates data by connecting an additional drive to a system using the Serial Advanced Technology Attachment (SATA) interface on a motherboard, and copying files to the new storage device.