All Detections

Ransomware hits healthcare - Turning off System Restore

Azure Sentinel@AzureSentinel
updated Jun 17, 20251026

Find attempts to stop System Restore and. Prevent the system from creating restore points.

Microsoft Sentinel (KQL)