Black Basta Ransomware Patterns

Rule Info

Name
Black Basta Ransomware Patterns
Author
pH-T
Description
Detects suspicious deletion patterns as observed in Black Basta intrusions
Reference
https://assets.sentinelone.com/sentinellabs22/SentinelLabs-BlackBasta#page=1
Date
2023-01-23 00:00:00
Modified
None
Id
e3c516a5-9ebe-4061-9962-382863cacaa4
Tags
attack.execution attack.t1059
Type
Nextron Sigma feed only (private)

Rule History

THOR Logo  Scan your endpoints, forensic images or collected files with our portable scanner THOR
  Warning: Access to VALHALLA is rate-limited - once you prove unworthy, access gets denied
  Nextron Systems 2022