Compressed File Creation Via Tar.EXE

SigmaHQ Detections@sigmaHQ

•updated Nov 1, 2024•0•0•0

Detects execution of "tar.exe" in order to create a compressed file. Adversaries may abuse various utilities to compress or encrypt data before exfiltration.