Tar.exe Sensitive Data Archiving

Paul P@ppritch

•updated Jan 28, 2026•4•0•47

Detects the execution of the native Windows tar.exe utility to create archives of sensitive files or directories. This behavior is often associated with data staging for exfiltration.