Sidestepping SharePoint Security: Two New Techniques to Evade Exfiltration Detection

These techniques can bypass the detection and enforcement policies of traditional tools, such as cloud access security brokers, data loss prevention, and SIEMs, by hiding downloads as less suspicious access and sync events.