Data Encrypted for Impact
Adversaries may encrypt data on target systems or on large numbers of systems in a network to interrupt availability to system and network resources. They can attempt to render stored data inaccessible by encrypting files or data on local and remote drives and withholding access to a decryption key. This may be done in order to extract monetary compensation from a victim in exchange for decryption or a decryption key (ransomware) or to render data permanently inaccessible in cases where the key ...
BY SOURCE
PROCEDURES (90)
Auto-extracted: 68 detections for authentication monitoring
Auto-extracted: 34 detections for general monitoring
Auto-extracted: 29 detections for attachment
Auto-extracted: 18 detections for email security
Auto-extracted: 14 detections for script execution monitoring
Auto-extracted: 8 detections for phish
Auto-extracted: 8 detections for network connection monitoring
Auto-extracted: 8 detections for email
Auto-extracted: 7 detections for download
Auto-extracted: 7 detections for email
Auto-extracted: 7 detections for bypass
Auto-extracted: 7 detections for base64
Auto-extracted: 6 detections for aws
Auto-extracted: 5 detections for suspicious
Auto-extracted: 5 detections for suspicious
Auto-extracted: 5 detections for suspicious
Auto-extracted: 5 detections for impersonat
Auto-extracted: 5 detections for download
Auto-extracted: 5 detections for macro
Auto-extracted: 4 detections for service
Auto-extracted: 4 detections for obfuscat
Auto-extracted: 4 detections for ransomware
Auto-extracted: 4 detections for office
Auto-extracted: 3 detections for ransomware
Auto-extracted: 3 detections for encrypt
Auto-extracted: 3 detections for suspicious
Auto-extracted: 3 detections for bypass
Auto-extracted: 3 detections for attachment
Auto-extracted: 3 detections for impersonat
Auto-extracted: 3 detections for unusual
Auto-extracted: 3 detections for phish
Auto-extracted: 3 detections for remote
Auto-extracted: 3 detections for phish
Auto-extracted: 3 detections for attachment
Auto-extracted: 3 detections for http
Auto-extracted: 3 detections for office
Auto-extracted: 3 detections for encrypt
Auto-extracted: 2 detections for impersonat
Auto-extracted: 2 detections for credential
Auto-extracted: 2 detections for cloud
Auto-extracted: 2 detections for base64
Auto-extracted: 2 detections for ransomware
Auto-extracted: 2 detections for attachment
Auto-extracted: 2 detections for powershell
Auto-extracted: 2 detections for ransomware
Auto-extracted: 2 detections for obfuscat
Auto-extracted: 2 detections for service
Auto-extracted: 2 detections for service
Auto-extracted: 2 detections for service
Auto-extracted: 2 detections for credential
Auto-extracted: 2 detections for credential
Auto-extracted: 2 detections for macro
Auto-extracted: 2 detections for api
Auto-extracted: 2 detections for evasion
Auto-extracted: 2 detections for remote
Auto-extracted: 1 detections for suspicious
Auto-extracted: 1 detections for macro
Auto-extracted: 1 detections for macro
Auto-extracted: 1 detections for suspicious
Auto-extracted: 1 detections for ransomware
Auto-extracted: 1 detections for inject
Auto-extracted: 1 detections for obfuscat
Auto-extracted: 1 detections for download
Auto-extracted: 1 detections for credential
Auto-extracted: 1 detections for obfuscat
Auto-extracted: 1 detections for credential
Auto-extracted: 1 detections for email
Auto-extracted: 1 detections for credential
Auto-extracted: 1 detections for cloud
Auto-extracted: 1 detections for api
Auto-extracted: 1 detections for email
Auto-extracted: 1 detections for base64
Auto-extracted: 1 detections for inject
Auto-extracted: 1 detections for cloud
Auto-extracted: 1 detections for office
Auto-extracted: 1 detections for suspicious
Auto-extracted: 1 detections for ransomware
Auto-extracted: 1 detections for impersonat
Auto-extracted: 1 detections for encrypt
Auto-extracted: 1 detections for download
Auto-extracted: 1 detections for inject
Auto-extracted: 1 detections for http
Auto-extracted: 1 detections for cloud
Auto-extracted: 1 detections for phish
Auto-extracted: 1 detections for cloud
Auto-extracted: 1 detections for remote
Auto-extracted: 1 detections for powershell
Auto-extracted: 1 detections for email
Auto-extracted: 1 detections for powershell
Auto-extracted: 1 detections for service