AML.T0037
Data from Local System
Description
Adversaries may search local system sources, such as file systems and configuration files or local databases, to find files of interest and sensitive data prior to Exfiltration. This can include basic fingerprinting information and sensitive data such as ssh keys.
Honesty-tier rationale
Collection assumes access to real data stores; at most a concept can be staged over a mock repository.