Compliance Node Overview
MITRE ATT&CK T1011 (Exfiltration Over Other Network Medium) is an Enterprise Exfiltration technique. Adversaries may attempt to exfiltrate data over a different network medium than the command and control channel. If the command and control network is a wired Internet connection, the exfiltration may occur, for example, over a WiFi connection, modem, cellular data connection, Bluetooth, or another radio frequency (RF) channel. ATT&CK documents 1 sub-technique: T1011.001 Exfiltration Over Bluetooth. Affected platforms: Linux, macOS, Windows. MITRE-documented mitigations include M1042 Disable or Remove Feature or Program, M1028 Operating System Configuration. The Center for Threat-Informed Defense maps this technique to NIST SP 800-53 Rev 5 controls AC-18, CM-06, CM-07, SC-43, SI-04.
Pillar: Cybersecurity · Authority: MITRE Corporation · Version: 1.0.0 · Last updated:
Primary source: https://attack.mitre.org/techniques/T1011/
SHA-256 integrity: d94f0343117681e18a4c43f12315909c27f60cdb0f16ecd73120f2d1b79901d3
Primary Citations — 7 traced to source
- MITRE ATT&CK Technique T1011: Exfiltration Over Other Network Medium (https://attack.mitre.org/techniques/T1011/) with 1 sub-techniques
- MITRE ATT&CK Tactic TA0010: Exfiltration (https://attack.mitre.org/tactics/TA0010/)
+ 5 more citations (full bibliography, deterministic workflow, actionable schema and crosswalks) included in the vault unlock — $0.01 via Skyfire / L402 / Direct Base USDC.
Access