Usecase: Hide data compressed into an Alternate Data Stream.
Privileges required: User
OS: Windows XP, Windows vista, Windows 7, Windows 8, Windows 8.1.
MITRE ATT&CK®: T1564.004
Download
Download and compress a remote file and store it in a cab file on local machine.
Usecase: Download and compress into a cab file.
Privileges required: User
OS: Windows Server 2012, Windows Server 2012R2, Windows Server 2016, Windows Server 2019
MITRE ATT&CK®: T1105