Generic Data Staging Exfiltration Temp

nomit vyas@xoxo

•updated Feb 13, 2026•2•0•53

Detects suspicious file staging activity in Temp directory structures commonly used for data exfiltration preparation. Includes credential folders, system information collection, and archive creation