Settra Ransomware File Encryption (.locked/.locked_wip) & Ransom Note

Ibrahim Saud@tektrix

•updated 21 days ago•0•0•0

Detects the creation of files with specific extensions (.locked, .locked_wip) or filenames (RESTORE_FILES.txt) commonly associated with ransomware operations and ransom notes.