menuPass actors are thought to have staged archives in the Recycle Bin for exfiltration. This will stage files in (Audio Capture or other)
either Trash or Recycling bins.
View Command
To view this TTPs command, you must be logged in with a professional or enterprise license.