value: APT29 has exfiltrated collected data over a simple HTTPS request to a password-protected archive staged on a victim's OWA servers. 
name: Exfiltration Over Alternative Protocol: Exfiltration Over Asymmetric Encrypted Non