AMOS - FileGrabber Staging Directory Setup (T1074.001)

Ibrahim Saud@tektrix

•updated Jun 21, 2026•0•0•2

Detects the creation of specific staging paths utilized by AMOS to organize stolen artifacts before archiving.