DirLister Execution

SigmaHQ Detections@sigmaHQ

•updated Nov 26, 2025•0•0•0

Detect the usage of "DirLister.exe" a utility for quickly listing folder or drive contents. It was seen used by BlackCat ransomware to create a list of accessible directories and files.