Gentlemenedrkillerstagingdirectory
Detects file creation or process execution occurring from a folder named 'GentlemenCollection', the known staging directory for Gentlemen RaaS EDR killers prior to ransomware encryption.
YARA-L
Detects file creation or process execution occurring from a folder named 'GentlemenCollection', the known staging directory for Gentlemen RaaS EDR killers prior to ransomware encryption.
Already have an account?