MITRE ATT&CK detection coverage

← Back to main site

Home/ MITRE Matrix/ Collection/ T1114.001

T1114.001Local Email Collection

T1114.001 — Local Email Collection is a MITRE ATT&CK technique in the Collection tactic. Clankerusecase tracks 6 detection use cases covering it.

Collection

View on the matrix → Filter Detection Library MITRE official spec ↗

6Use cases

0Articles

0Sub-techniques

1Tactic

↑ Parent technique: T1114 · Email Collection

Use cases covering this technique (6)

Email files written outside of the Outlook directory ESCU actions · alerting P O365 Email Password and Payroll Compromise Behavior ESCU actions · alerting P O365 Email Receive and Hard Delete Takeover Behavior ESCU actions · hunting P O365 Email Send and Hard Delete Exfiltration Behavior ESCU actions · hunting P O365 Email Send and Hard Delete Suspicious Behavior ESCU actions · hunting P Mailsniper Invoke functions ESCU actions · alerting P