Take the Data or Hurt the Business?

About this interactive

What you are doing: naming an adversary's objective as exfiltration or impact. The lesson uses two MITRE ATT&CK tactics for what an adversary finally wants. Exfiltration is stealing data: getting a copy out to somewhere the adversary controls, for espionage, a competitor's advantage or blackmail. On the CIA triad it is a loss of confidentiality. Impact is doing harm in place: manipulating data so it is wrong, destroying or encrypting it, taking a service down, or defacing a site. That is a loss of integrity or availability. How to use it: ask whether the data leaves. If a copy goes out, it is exfiltration, whatever is done with it later. If the data or service is changed, locked or broken where it is, it is impact. A wrong answer resets your streak and shows the right bin; land five in a row to finish.

What you'll learn

Classify an adversary's action on objectives as exfiltration (stealing data, a loss of confidentiality) or impact (manipulating, destroying, encrypting or disrupting, a loss of integrity or availability), the two MITRE ATT&CK tactics the lesson uses for objectives

Aligned to

CompTIA Security+

2.1 Compare and contrast common threat actors and motivations.

CompTIA CySA+

3.1 Explain concepts related to attack methodology frameworks.

Key terms

Data Exfiltration: The unauthorized transfer of data from a system to an external destination.
Impact: The potential consequence or damage to an organization if a risk event occurs, expressed qualitatively or as a monetary value.
MITRE ATT&CK: A globally accessible knowledge base that categorizes adversary tactics and techniques based on real-world observations, used to understand and defend against cyber threats.
Ransomware: A type of malware that encrypts a victim's files and demands payment in exchange for the decryption key.
Denial of Service: An attack that floods a system or network with traffic to make it unavailable to legitimate users.
Tactics, Techniques, and Procedures: Tactics, Techniques, and Procedures describe the behavior and methods used by threat actors during cyberattacks, with TTPs forming the basis for frameworks such as MITRE ATT&CK and enabling defenders to develop detection and response strategies.

Topics

Data Exfiltration Impact Mitre Att Ck Interactive Streak Sort

About TechKnowSurge

TechKnowSurge builds IT and cybersecurity professionals through hands-on, concept-first training built around real understanding — not memorization. Free interactive tools, structured programs, and 25+ years of real-world experience, all in one place.

Explore free tools and programs →