Darya Fleishman
@ShadoWalker0 followers83 downloads12 copies5 likes461 views
2 detections
Filters
Last updated
All Time
Detection languages
1
1
Categories
1
1
Platforms
1
1
1
1
Products / Services
1
1
1
1
1
MITRE Techniques
1
1
1
1
1
Detects potential data exfiltration from cloud storage or SaaS platforms based on a large volume of data transferred or a high number of distinct files accessed by a single user or application within a one-hour window. This is a common TTP for threat actors like ShinyHunters who aim to steal large datasets.
Detects specially crafted RAR archives that exploit the CVE-2025-8088 directory traversal vulnerability. This technique is used to drop files into the Windows Startup folder for persistence, as seen in campaigns by the RomCom threat actor.