WinSCP

And I found an article which I'll go ahead and link up there.

And it's kind of goes over why Linux is a little faster when you're you know sharing or copying a ton of small files it basically revolves around the ext4 file system and how it's a bit more efficient than ntfs when it comes to small files and it's not necessarily that it transfers faster it's just more efficient on the actual transfer of lot of small files so very cool another side benefit and then three and four kind of jumbled together here for me in something i didn't even see or didn't even i don't know why i didn't think about this when i did transfer but i do a lot of ssh and i also do a lot of sftp so these things in windows you know for ssh i'm loading putty up For SFTP, I got WinSCP, which I'd be using a lot in Windows.

And I use those programs on a daily basis.

I don't know why this didn't click, but SSH is native to Linux terminal.

I've been using Putty for all these years in Windows just because I was so used to it being my daily driver, I didn't even think about terminal.

Yeah, so very cool side benefit.

And SFTP was so much better than the experience in Windows using WinSCP because that required like a long connection time, pulling up another app.

Well, it's all built into Nautilus, the file manager in Linux.

Sometimes it changes users' passwords so the real owners are locked out.

Data is zipped and copied out with tools like Rclone and WinSCP before anything is encrypted.

It also halts the volume shadow copy service, and it factory resets backup devices on network-attached storage, the file servers in a box where many small firms keep their only copy.

So what would you actually see if you were defending? An admin tool running at 3am, a new account, a large archive leaving for cloud storage, a backup box resetting itself.

So that's why file exfiltration is so important.

A lot of the times you'll see threat actors who don't have a tool like this, they'll use things like WinSCP, curl, you know, basically living off land type benign tools that all of us are familiar with.

But this just makes it so much easier to give them this one tool, point, click, and then they're off to the races.

So what we're going to do first is look at what the Steelbit console looks like.