VILE Ransomware Direct NT Syscall EDR Bypass via Go Binary Artifacts
Detects indicators of the VILE ransomware, including execution of known malicious binaries, creation of specific ransomware-related files (artifacts), usage of PowerShell to create shortcuts, and encryption activities in Chrome user directories.
Cortex XDR
