value:  KGH_SPY can harvest data from mail clients. ;; Magic Hound has collected .PST archives. ;; Out1 can parse e-mails on a target machine. ;; Pupy can interact with a victim’s Outlook session and look through folders and emails. ;; Smoke Loader searches through Outlook files and directories (e.g. inbox sent templates drafts archives etc.).";;The FBI and CISA have detected multiple zero-day exploits, with actors attempting to collect mailbox data in the form of .ost files from Microsoft Exchange servers. ;; Warzone features functionality precipitating the theft of browser and email clients. ;; The cmdlet New-MailboxExportRequest within Powershell is used to steal email boxes, and has been observed to be used by Chinese state sponsored actors. 
name: Email Collection: Local Email Collection