Adversaries may leverage the SharePoint repository as a source to mine valuable information. SharePoint will often contain useful information for an adversary to learn about the structure and functionality of the internal network and systems. For example, the following is a list of example information that may hold potential value to an adversary and may also be found on SharePoint:

* Policies, procedures, and standards
* Physical / logical network diagrams
* System architecture diagrams
* Technical system documentation
* Testing / development credentials
* Work / project schedules
* Source code snippets
* Links to network shares and other internal resources

Sharepoint
source_name: mitre-attack  url: https://attack.mitre.org/techniques/T1213/002  external_id: T1213.002     source_name: Microsoft SharePoint Logging  description: Microsoft. (2017, July 19). Configure audit settings for a site collection. Retrieved April 4, 2018.  url: https://support.office.com/en-us/article/configure-audit-settings-for-a-site-collection-a9920c97-38c0-44f2-8bcb-4cf1e2ae22d2     