T1005 Data from Local System

Named by 2 kept items in this workspace.

Search every workspace for T1005 Data from Local System. It matches the name as written, so it can find other things that share it.

The items that name it 2

Inside the LiteLLM 1.107.0 supply chain compromise: Credential theft through Python startup hooks
writeup2026-10-23
GhostAction Attack Escalates By Targeting GitHub Users
writeup2026-10-09It is written here as T1005 Data from Local System (Collection).
Collection

All techniques in this workspace.