Exception Handling
CONCEPT
INTELLIGENT AUTOMATION
Software routines that detect, manage, isolate, and recover from runtime execution errors without collapsing operations.
CONCEPT
CYBERSECURITY
Data Exfiltration
The unauthorized transfer, disclosure, or removal of data from a system, network, application, or controlled environment.
BUSINESS RELEVANCE
Exfiltration can expose personal data, intellectual property, credentials, regulated information, and commercial strategy, leading to operational disruption, notification duties, financial loss, and reputational damage.
IMPLEMENTATION EXAMPLE
An attacker compromises a SaaS administrator account and exports customer records to external storage. Identity telemetry, unusual-download alerts, and egress controls detect and contain the activity.
LIMITATIONS
Data exfiltration is an outcome, not a single attack technique. Legitimate transfers can look similar, encrypted traffic reduces content visibility, and prevention controls can disrupt normal work if classification and policies are poorly designed.
TECHNICAL EXPLANATION
Exfiltration may occur through network channels, cloud services, removable media, compromised accounts, malicious insiders, covert protocols, or authorized tools used outside policy. It can be rapid or deliberately low-volume to evade detection. Controls include data classification, least privilege, egress filtering, data loss prevention, behavioral monitoring, encryption, and incident response.
Secondary Topics
AI Governance, Data Engineering
Sources
MITRE ATT&CK — Exfiltration — https://attack.mitre.org/tactics/TA0010/; NIST — Cybersecurity Framework — https://www.nist.gov/cyberframework
Related terms
Buyer Intent Data
CONCEPT
REVENUE OPERATIONS
Buyer intent data tracks research activity, such as content consumption or review site visits, to flag accounts that may be in market for a solution.
Distributed Denial of Service (DDoS)
CONCEPT
CYBERSECURITY
Attacks that use botnets to overwhelm servers or networks with traffic, and the layered defenses that absorb, filter and rate-limit the malicious requests.
Dark Social
CONCEPT
PERFORMANCE ADVERTISING
Links shared privately via messaging apps, email and Slack arrive without referrer data, so analytics logs them as direct traffic and undercounts them.
Headless CMS
CONCEPT
SYSTEMS ARCHITECTURE
Content editing separated from presentation, with structured content served as JSON through REST or GraphQL APIs to websites, apps and other channels.