AML.T0037

MITRE ATLAS / Data from Local System

Adversaries search local file systems, configuration files, and databases for files of interest and sensitive data ahead of exfiltration.

Think of it likeGoing through the desk drawers in the office you are standing in before moving to the next one.

In plain English

The machine an attacker lands on usually holds something useful: cached datasets, checkpoints, config files, and the notebooks that describe how everything fits together.