MITRE ATT&CK technique

Data Transfer Size Limits detection rulesT1030

Data Transfer Size Limits (T1030) is a MITRE ATT&CK technique in the Exfiltration tactic. This page lists the 2 community-maintained Sigma detection rules in the library mapped to T1030 and its sub-techniques. Each rule includes its detection logic, log source, false positives and original YAML. These rules mainly target macos, linux.