DS0016

DS0016Drive

ATT&CK
14.1
References
2

Description

A non-volatile data storage device (hard drive, floppy disk, USB flash drive) with at least one formatted partition, typically mounted to the file system and/or assigned a drive letter(Citation: Sysmon EID 9)

References

  1. https://attack.mitre.org/datasources/DS0016
  2. https://docs.microsoft.com/sysinternals/downloads/sysmon#event-id-9-rawaccessread

Related by meaning· 6

Nearest entities by semantic similarity across the cs-graph corpus.

Data component
Drive Access
Data source
Volume
Data source
File
Data component
Drive Creation
Data source
Network Share
Data source
Firmware
Sourced from MITRE ATT&CK Enterprise 14.1. Curated by Adam Lundqvist, SQUR.