Akira Staging and Exfiltration Tool Chain: FileZilla, WinSCP, RClone, WinRAR
Detects the sequential relationship of data staging using tools like WinRAR and subsequent exfiltration using tools like Rclone, WinSCP, or FileZilla on a single host within a 24-hour window.
Splunk (SPL)
