Nimbus Manticore - BackupCheck Persistence Task
Identifies the creation of the BackupCheck scheduled task designed to repeatedly trigger the setup.exe doit sideload chain, associated with the Nimbus Manticore threat actor.
Microsoft Sentinel (KQL)

Identifies the creation of the BackupCheck scheduled task designed to repeatedly trigger the setup.exe doit sideload chain, associated with the Nimbus Manticore threat actor.

Already have an account?