BitLockerToGo.EXE Execution
Detects the execution of "BitLockerToGo.EXE". BitLocker To Go is BitLocker Drive Encryption on removable data drives. This feature includes the encryption of USB flash drives, SD cards, External hard disk drives, and other drives formatted with NTFS, FAT16, FAT32, or exFAT file systems. This is a rarely used application, and its usage is worth investigating. Malware such as Lumma Stealer has been observed using this process as a target for process hollowing.
Sigma
