Data Exfil - Target Extension Sweeping Script (T1083)

Ibrahim Saud@tektrix

•updated Jun 23, 2026•1•0•2

Identifies scripts or commands iterating through logical drives specifically searching for sensitive file extensions (.kdbx, .pdf, .docx, .xlsx, .txt) and then creating a text file, indicating potential data staging prior to exfiltration.