T1213.002Sharepoint

T1213.002 — Sharepoint is a MITRE ATT&CK technique in the Collection tactic. Clankerusecase tracks 2 detection use cases covering it and 1 threat-intel article citing it.