Rule Info
Name
VeilTransfer Data Exfiltration
Author
Florian Roth
Description
Detects usage of VeilTransfer, a tool to exfiltrate data via different protocols and services (e.g. Github, Telegram, Mega, etc.)
Date
2024-08-27 00:00:00
Modified
None
Id
4f2684b7-425e-4ef8-b484-985adce9b47c
Tags
attack.t1048 attack.exfiltration
Type
Nextron Sigma feed only (private)
Rule History
Scan your endpoints, forensic images or collected files with our portable scanner THOR