MITRE ATT&CK detection coverage

← Back to main site

Home/ MITRE Matrix/ Collection/ T1114

T1114Email Collection

T1114 — Email Collection is a MITRE ATT&CK technique in the Collection tactic. Clankerusecase tracks 2 detection use cases covering it.

Collection

View on the matrix → Filter Detection Library MITRE official spec ↗

2Use cases

0Articles

3Sub-techniques

1Tactic

Sub-techniques (3)

T1114.003 · Email Forwarding Rule T1114.001 · Local Email Collection T1114.002 · Remote Email Collection

Use cases covering this technique (2)

O365 New Forwarding Mailflow Rule Created ESCU actions · alerting P O365 PST export alert ESCU actions · alerting P