Tool: BITSAdmin

Description

[BITSAdmin](https://attack.mitre.org/software/S0190) is a command line tool used to create and manage [BITS Jobs](https://attack.mitre.org/techniques/T1197). (Citation: Microsoft BITSAdmin)

External References

• mitre-attack
• Microsoft BITSAdmin

Techniques Used by This Tool

• T1048.003 — Exfiltration Over Unencrypted Non-C2 Protocol
• T1105 — Ingress Tool Transfer
• T1197 — BITS Jobs
• T1570 — Lateral Tool Transfer

APT Groups Using This Tool

• Wizard Spider
• Daggerfly
• HEXANE
• Leviathan
• Storm-1811
• Tropic Trooper
• APT41
• Ferocious Kitten