Makop Ransomware - Shadow Copy & Backup Catalog Deletion
Detects attempts to delete backup catalogs or shadow copies using wbadmin.exe or vssadmin.exe, common anti-recovery techniques used by Makop ransomware.
Microsoft Sentinel (KQL)
Detects attempts to delete backup catalogs or shadow copies using wbadmin.exe or vssadmin.exe, common anti-recovery techniques used by Makop ransomware.
Already have an account?