Rule Info
Name
Uncommon File Creation Activity In Recycle.Bin
Author
X__Junior (Nextron Systems), Nasreddine Bencherchali (Nextron Systems)
Description
Detects uncommon file creation activity in the recycle bin directory. This directory is often used to stage malware.
Date
2024-01-24 00:00:00
Modified
None
Id
19028d08-9159-4d5b-8f2d-7ab84f2ae34a
Tags
attack.persistence attack.defense_evasion
Type
Nextron Sigma feed only (private)
Rule History
Scan your endpoints, forensic images or collected files with our portable scanner THOR