Archive Collected Data: Archive via Custom Method

Threat Actors may compress or encrypt data that is collected prior to exfiltration using a custom method. Threat Actors may choose to use custom archival methods, such as encryption with XOR or stream ciphers implemented with no external library or utility references. Custom implementations of well-known compression algorithms have also been used.