Conti Volume Shadow Listing
Detects a command used by the Conti ransomware group to list volume shadow copies and redirect the output to a log file. This activity is often a precursor to deleting shadow copies to prevent system recovery.
Sigma
Detects a command used by the Conti ransomware group to list volume shadow copies and redirect the output to a log file. This activity is often a precursor to deleting shadow copies to prevent system recovery.
Already have an account?