Makop Ransomware - Wallpaper Registry Change with Temp Directory Creation
Correlates suspicious Temp directory creation with immediate wallpaper registry modifications, a common pattern for Makop ransom notes.
Microsoft Sentinel (KQL)

Correlates suspicious Temp directory creation with immediate wallpaper registry modifications, a common pattern for Makop ransom notes.

Already have an account?