Collection The collection tactic consists of techniques that are used by attackers to collect data from cloud web applications or connected resources. ID Name MS-TA7025 Access application database MS-TA7026 Event data capture