Rapid Encryption Expand / Collapse
Author
Message
Posted 3/26/2019 1:43:51 PM
Forum Newbie

Forum NewbieForum NewbieForum NewbieForum NewbieForum NewbieForum NewbieForum NewbieForum Newbie

Group: Forum Members
Last Login: 3/26/2019 1:38:28 PM
Posts: 1, Visits: 0
Hi all,
is there any event code to track rapid encryption in Windows? If not 4714 can be somehow used in this context - ransomware?
Thank you all.
Post #8555
Posted 6/24/2019 2:15:11 PM
Supreme Being

Supreme BeingSupreme BeingSupreme BeingSupreme BeingSupreme BeingSupreme BeingSupreme BeingSupreme Being

Group: Moderators
Last Login: 11/14/2013 3:17:47 PM
Posts: 234, Visits: 0
Does rapid encryption imply a large quantity of files being encrypted quickly? I recommended watching Randy's webinars on detecting ransomware. There is not a single event that will detect this.
Post #8573
« Prev Topic | Next Topic »


Permissions Expand / Collapse

All times are GMT -5:00, Time now is 8:02am