Data Transfer Size Limits
Technique · ATTACK:enterprise:T1030
Attributed source ↗ · Plaintext record · Complete record and assertions JSON
Inspect structured metadata and provenance
{
"id": "ATTACK:enterprise:T1030",
"title": "Data Transfer Size Limits",
"type": "Technique",
"source_url": "https://attack.mitre.org/techniques/T1030",
"snapshot": "enterprise-attack-20.0.json",
"status": "active",
"rights": "Source metadata only; source notices retained; no operational prose or payloads",
"review_status": "machine-extracted; source-specific checks passed, editorial review pending",
"stix_id": "attack-pattern--c3888c54-775d-4b2f-b759-75a2ececcbfd",
"external_id": "T1030",
"domain": "enterprise",
"created": "2017-05-31T21:30:34.523Z",
"modified": "2026-09-16T18:03:15.995Z",
"version": "1.2",
"aliases": [
],
"tactics": [
"exfiltration"
],
"source_references": [
{
"source_name": "Chunked Encoding",
"url": "https://requestly.com/blog/chunked-encoding/"
}
]
}Explicit source assertions (22)
First 80 shown here; the complete set is in this record’s JSON and plaintext. Each relationship retains its source and locator. No inferred relationships are added.
ATTACK:enterprise:G1040 → uses → ATTACK:enterprise:T1030
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--017d597b-2268-4760-baf0-0cee23906965
CISA Play Ransomware Advisory December 2023 · Trend Micro Ransomware Spotlight Play July 2023ATTACK:enterprise:G1014 → uses → ATTACK:enterprise:T1030
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--07a569f4-ecb0-45b2-a880-3542508e9835
Bitdefender LuminousMoth July 2021ATTACK:enterprise:G0027 → uses → ATTACK:enterprise:T1030
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--0b36c1d0-d016-4c12-bf61-6dc14b29c7e0
Dell TG-3390ATTACK:enterprise:S0264 → uses → ATTACK:enterprise:T1030
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--1abf4f3f-85e7-4bd1-9432-bddd40a0ad75
Unit 42 OopsIE! Feb 2018ATTACK:enterprise:S0150 → uses → ATTACK:enterprise:T1030
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--3e497bf1-4fdc-40a2-b8a2-3492c1d605e5
FireEye POSHSPY April 2017ATTACK:enterprise:C0026 → uses → ATTACK:enterprise:T1030
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--42d043a1-0b6f-4acd-aea2-553579eb49c2
Mandiant Suspected Turla Campaign February 2023ATTACK:enterprise:S0487 → uses → ATTACK:enterprise:T1030
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--45852cf6-f0e8-45b8-9636-0dee90f7d2fc
ESET ForSSHe December 2018ATTACK:enterprise:S1020 → uses → ATTACK:enterprise:T1030
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--681857ae-6461-4070-a2b8-1fb53972ab38
Kaspersky Lyceum October 2021ATTACK:enterprise:S0644 → uses → ATTACK:enterprise:T1030
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--6aae6da8-eaf5-4139-a773-25075c4e0cc6
Talos Oblique RAT March 2021ATTACK:enterprise:S1200 → uses → ATTACK:enterprise:T1030
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--727a1214-1098-4639-8482-5d6d8718de76
Cybereason StealBit Exfiltration ToolATTACK:enterprise:S0622 → uses → ATTACK:enterprise:T1030
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--909b065a-d857-48dc-9d6b-f7847bf613e6
KISA Operation MuzabiATTACK:enterprise:S0154 → uses → ATTACK:enterprise:T1030
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--98cc96c2-b876-4e1b-bec9-cb7ea8a8e532
cobaltstrike manualATTACK:enterprise:M1031 → mitigates → ATTACK:enterprise:T1030
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--a0a004fe-2636-4f6d-85c7-2401768252a2
ATTACK:enterprise:S0495 → uses → ATTACK:enterprise:T1030
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--a901b584-c676-4419-9357-943de685114e
Unit42 RDAT July 2020ATTACK:enterprise:S0699 → uses → ATTACK:enterprise:T1030
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--ac603ee0-cb62-4ad5-852a-29b70b225c5f
Mythc DocumentationATTACK:enterprise:S1040 → uses → ATTACK:enterprise:T1030
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--b351cd80-323d-4e67-a539-547a76d9e257
DFIR Conti Bazar Nov 2021 · RcloneATTACK:enterprise:G0007 → uses → ATTACK:enterprise:T1030
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--b4c27a33-0669-4b10-a801-eb81e3563260
Cybersecurity Advisory GRU Brute Force Campaign July 2021ATTACK:enterprise:C0015 → uses → ATTACK:enterprise:T1030
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--ca476de5-e17e-4011-9e5b-b438299c385c
DFIR Conti Bazar Nov 2021ATTACK:enterprise:S1141 → uses → ATTACK:enterprise:T1030
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--d91ceccf-8a53-4a99-a71d-b471f58eaf05
ESET Turla Lunar toolset May 2024ATTACK:enterprise:G0096 → uses → ATTACK:enterprise:T1030
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--f291084b-a84d-452f-bd1d-d89257c7e8c2
Rostovcev APT41 2021ATTACK:enterprise:S0030 → uses → ATTACK:enterprise:T1030
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--f4182c2a-c2b3-4866-9f7e-f29e0229dead
FireEye CARBANAK June 2017ATTACK:enterprise:S0170 → uses → ATTACK:enterprise:T1030
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--f81274dc-2f5b-47f7-b91f-70a4ebdfde95
Palo Alto OilRig May 2016