avatar

Renzo L

@Renz0x
0 followers0 downloads8 copies0 likes12 views

1 detection

Detects a high volume of file creation events (greater than 200 files) on an external USB mount session by a non-system account, which may indicate potential data exfiltration or staging to removable media.
avatar
Renzo L@Renz0x
avatar
Detections.ai Community
12 days ago
8012