Katz Stealer Browser Key Decryption File Creation
Detects the creation of specific text files in the AppData directory, which is a known behavior of the Katz Stealer malware after it successfully decrypts and dumps browser master keys.
Splunk (SPL)
Detects the creation of specific text files in the AppData directory, which is a known behavior of the Katz Stealer malware after it successfully decrypts and dumps browser master keys.
Already have an account?