Mass AV/EDR process termination following NvFsFilter (Alinubx.sys) driver load
Detects the loading of the malicious NvFsFilter driver (a BYOVD technique often used by the Rapuncel infostealer) followed immediately by a mass burst of process terminations, indicating an attempt to disable security software.
Sigma
