Known APT Artifact File Creation/Modification

Ankit Mehta@Secvyn

•updated Jun 17, 2026•0•0•1

Detects the creation or modification of files with specific names known to be associated with Advanced Persistent Threat (APT) groups. This rule identifies potential APT activity by monitoring for the presence of these highly suspicious file names on endpoints.