Gunra Ransomware - Recursive Drive Enumeration
Detects a process performing rapid, high-volume file system enumeration across multiple drives while deliberately avoiding critical system directories, a behavior consistent with the reconnaissance phase of Gunra ransomware.
Microsoft Sentinel (KQL)
