NightSpire Ransomware 7-Zip Data Staging
Detects the execution of 7-Zip with specific command-line arguments (password protection, zip format, mx5 compression) used by NightSpire ransomware for data staging prior to exfiltration.
Sigma
Detects the execution of 7-Zip with specific command-line arguments (password protection, zip format, mx5 compression) used by NightSpire ransomware for data staging prior to exfiltration.
Already have an account?