Ransomware hits healthcare - Clearing of system logs
// Look for attempts to use fsutil.exe to delete file system logs that can be used as forensic artifacts.
Microsoft Sentinel (KQL)
// Look for attempts to use fsutil.exe to delete file system logs that can be used as forensic artifacts.
Already have an account?