Skip to content

DET0698 Detection of Exfiltration Over Alternative Protocol

Item Value
ID DET0698
Version 1.0
Created 21 October 2025
Last Modified 21 October 2025

Technique Detected: T1639 (Exfiltration Over Alternative Protocol)

Analytics

Android

AN1813

Exfiltration Over Alternative Protocols can be difficult to detect, and therefore enterprises may be better served focusing on detection at other stages of adversarial behavior.

Log Sources
Data Component Name Channel
Mutable Elements
Field Description

iOS

AN1814

Exfiltration Over Alternative Protocols can be difficult to detect, and therefore enterprises may be better served focusing on detection at other stages of adversarial behavior.

Log Sources
Data Component Name Channel
Mutable Elements
Field Description