01flip Ransomware File Encryption Detection
Detects the mass renaming or creation of files with the '.01flip' extension, which is characteristic of the 01flip ransomware. A high count of these files on a single host is a strong indicator of an active ransomware infection.
Microsoft Sentinel (KQL)
