OpnKey Ransomware Configurable Process-Kill Toggle Reference
Detects command-line execution containing 'Processes.KillRunningProcesses', a string characteristic of the OpnKey ransomware builder configuration, suggesting an intent to terminate critical processes to facilitate encryption.
Sigma
