Disable Windows Backdup

Richard Kohler@djrk01

•updated 14 days ago•2•0•12

Detects compromised users who are disabling windows backups. Seen commonly in pre encryption during ransomware attacks.