Suspicious Log.zip Created in TEMP (Infostealer Pattern)
Technique commonly used by Infostealers to compress data before its exfiltration
Microsoft Sentinel (KQL)

Technique commonly used by Infostealers to compress data before its exfiltration

Already have an account?