Install AWS CLI and exfiltrate file to S3 bucket

Using an AWS account and IAM credentials, install the AWS-Tools in Powershell and exfiltrate data from target host.
View Command

To view this TTPs command, you must be logged in with a professional or enterprise license.


Test this TTP

Download Operator (1.7.1)
Test this TTP using one of our Operator chains
APT38 Sony Hack


A Prelude portrayal of the 2014 hack on Sony attributed to APT38.