AI-Assisted Cybercrime - Mass File Encryption Burst

Georg Lauenstein@gsec

•updated 5 days ago•3•0•8

Detects a burst of file modifications producing common ransomware encryption extensions on a single host within a short window. This captures the destructive-scripting / data-encryption impact behaviour that AI-assisted cybercrime can drive, where a script rapidly renames or rewrites large numbers of files after execution.