// THREAT DETECTION AND DATA PRIVACY TERM
Exfiltration
Exfiltration is the unauthorized copying or moving of data from a computer system or network to an external location. This often happens after an attacker has gained access and is trying to steal sensitive information.
TECHNICAL DEFINITION
Exfiltration is the covert, unauthorized extraction or transmission of sensitive data from a compromised system or network to an external, attacker-controlled destination, representing a critical stage in the data breach lifecycle.
BACKGROUND
The United States Armed Forces are the military forces of the United States. United States federal law establishes six armed forces: the Army, Marine Corps, Navy, Air Force, Space Force, and Coast Guard, each assigned specific roles and operational domains. With the exception of the Coast Guard, which operates under the Department of Homeland Security (DHS) in peacetime, the services are organized under the Department of Defense (DoD).
READ MORE ON WIKIPEDIASYNONYMS & ALIASES
- data theft
- data egress
- data outflow
- data leakage
- data pilferage
- data extraction
USAGE NOTE
Exfiltration is a key indicator of compromise and is often the primary goal of advanced persistent threats (APTs) and insider threats.
DEVELOPERS
Organizations developing technology related to Exfiltration.
Forcepoint offers a comprehensive portfolio of cybersecurity solutions, including Data Loss Prevention (DLP), network security, and cloud security, specifically designed to prevent unauthorized data exfiltration and protect critical information.
Palo Alto Networks provides a broad platform of enterprise security solutions, including next-generation firewalls, endpoint protection (Cortex XDR), and cloud security, which are instrumental in detecting and preventing data exfiltration across various attack surfaces.
CrowdStrike is a leader in endpoint security, offering cloud-native endpoint detection and response (EDR) and extended detection and response (XDR) platforms that provide advanced threat detection, including the identification and prevention of data exfiltration attempts.
Varonis specializes in data security and analytics, helping organizations protect their unstructured data from insider threats and cyberattacks. Their platform detects suspicious activity and automates responses to prevent data exfiltration from file systems, NAS, SharePoint, and cloud storage.
Proofpoint focuses on email and cloud security, providing solutions that protect against advanced threats, data loss, and compliance risks. Their offerings include Data Loss Prevention (DLP) to prevent sensitive information from being exfiltrated via email, cloud applications, and web channels.
Microsoft offers a wide array of security products within its Microsoft 365 Defender and Azure security suites, including Data Loss Prevention (DLP), Microsoft Purview, and endpoint protection, all designed to identify, monitor, and protect sensitive data to prevent exfiltration.
Zscaler provides a cloud-native security platform that includes a Secure Web Gateway (SWG), Cloud Access Security Broker (CASB), and Data Loss Prevention (DLP) to secure user and application access, ensuring data protection and preventing exfiltration to unauthorized destinations.