Alexander Nguyen
@CyInt4G4mes0 followers6 downloads1 copy0 likes114 views
1 detection
Filters
Last updated
All Time
Detection languages
1
Categories
1
Platforms
1
1
Products / Services
1
MITRE Techniques
1
This rule detects the use of the vssadmin.exe command-line tool to delete volume shadow copies. This is a common and high-confidence technique used by ransomware and other malicious actors to prevent system recovery and increase their leverage.
