TACTIC: COLLECTION
Local Data Staging (T1074.001): real cases
MITRE Definition ↗ Adversaries stage stolen documents in hidden directories before exfiltrating them.
Key Facts
Technique ID
T1074.001
Collection
Mapped Cases
1
Primary sources
Related Laws
0
Criminal statutes
- ATT&CK Technique Identifier: T1074.001.
- Tactical Phase: Collection.
- Substantiated in 1 primary court prosecution cases.
- Every associated case includes verbatim evidentiary excerpts from indictments or sworn affidavits.
Verified Evidentiary Case Records
U.S. v. Hladyr, Kolpakov & Iarmak (FIN7 Cybercrime Syndicate)
sentenced 2018-03-27
Primary Source Evidence Excerpt: Trial Exhibit 8-C
"Stolen credit card tracks were staged in hidden directories under AppData\Local\Temp prior to scheduled exfiltration batches."
U.S. District Court for the Western District of Washington
View full case dossier →