Portable Gpg.EXE Execution from Uncommon Location
Detects the execution of 'gpg.exe' or 'gpg2.exe' from uncommon locations. This activity is often associated with ransomware and loaders that use GnuPG for encrypting or decrypting data.
Sigma
Detects the execution of 'gpg.exe' or 'gpg2.exe' from uncommon locations. This activity is often associated with ransomware and loaders that use GnuPG for encrypting or decrypting data.
Already have an account?