Skip to content

Static website

Info

ID: MS-T836
Tactic: Exfiltration
MITRE technique:

Attackers may use the "static website" feature to exfiltrate collected data outside of the storage account. Static website is a cloud storage provider hosting capability that enables serving static web content directly from the storage account. The website can be reached via an alternative web endpoint which might be overlooked when restricting access to the storage account.