Hunts for pre-exfiltration data staging and archiving by detecting archive-tool execution (rar, 7z, zip, tar), large compressed files written to staging directories, and collection into a single location before transfer. Activates for requests to hunt data staging, detect pre-exfil archiving, or find collection and compression before exfiltration.
日本語の概要は準備中です。原文の説明を表示しています。
meltedinhex/analyst-ai-pack222026年7月7日 更新