Suspicious Multiple File Rename Or Delete Occurred
Detects multiple file rename or delete events occurrence within a specified period of time by a same user (these events may signalize about ransomware activity).
Sigma

Detects multiple file rename or delete events occurrence within a specified period of time by a same user (these events may signalize about ransomware activity).

Already have an account?