Description
Detects ransomware activity tied to the Cobalt Strike ursnif post-exploitation framework.
Related malware families
Related blogs
MALWARE-CNC Cobalt Strike ursnif-ransomware.profile.GET traffic detected
IPS-SWG
1 SID: 170031
1 SID: 170031
Detects ransomware activity tied to the Cobalt Strike ursnif post-exploitation framework.