F00067 "Data forensics"

Tactic stage:

Summary:

Detects techniques:

DISARM Frameworks provided CC-by-SA by the DISARM Foundation