All Detections

Ransomware hits healthcare - Alternate Data Streams use

Azure Sentinel@AzureSentinel
updated Jun 17, 20252044

Find use of Alternate Data Streams (ADS) for anti-forensic purposes. Alternate Data Streams execution.

Microsoft Sentinel (KQL)