VILE Ransomware Security Tool Tampering - ETW Patch and Event Log Clear
Detects behavioral indicators associated with VILE ransomware, specifically focused on defense evasion through Windows event log clearing, termination of security-related processes, and the presence of specific ransomware-related configuration or identity files in common staging directories.
SentinelOne
