WinRAR ADS Exploitation
Detects crafted RAR archives abusing NTFS ADS path traversal to drop malicious payloads.
Microsoft Sentinel (KQL)

Detects crafted RAR archives abusing NTFS ADS path traversal to drop malicious payloads.

Already have an account?