attempt to detect KERANGER RANSOMWARE from Transmission - Mac - superseded
Log In or Register to download the BES file, and more.

0 Votes

Versioning - This is an older version.

1attempt to detect KERANGER RANSOMWARE from Transmission - Mac3/7/2016 12:30:54 PM
2attempt to detect KERANGER RANSOMWARE from Transmission - Mac3/7/2016 12:53:39 PM
3attempt to detect KERANGER RANSOMWARE from Transmission - Mac3/7/2016 1:42:38 PM


Property Details

ID2995858
StatusAlpha - Code that was just developed
Titleattempt to detect KERANGER RANSOMWARE from Transmission - Mac
DomainBESC
Added by on 3/7/2016 12:53:39 PM
Last Modified by on 3/7/2016 12:53:39 PM
Counters 1977 Views / 0 Downloads
User Rating 1 star 2 star 3 star 4 star 5 star * Average over 0 ratings. ** Log In or Register to add your rating.

Properties

.kernel_time
Period 1 hour
 
  * Results in a true/false
Show indented relevance
files ".kernel_time" of folders "Library" of folders of folders "/Users"
.kernel_pid
Period 1 hour
 
  * Results in a true/false
Show indented relevance
files ".kernel_pid" of folders "Library" of folders of folders "/Users"
kernel_service
Period 1 hour
 
  * Results in a true/false
Show indented relevance
files "kernel_service" of folders "Library" of folders of folders "/Users"
transmission
Period 1 hour
 
  * Results in a true/false
Show indented relevance
applications whose(name of it as lowercase contains "transmission")
kernel_
Period 1 hour
 
  * Results in a true/false
Show indented relevance
files whose(name of it as lowercase contains "kernel_") of folders "Library" of folders of folders "/Users"
Exists downloaded copy of Transmission 2.90
Period 1 hour
 
  * Results in a "string"/number
Show indented relevance
exists files whose(name of it contains "2.90" AND name of it as lowercase contains "transmission") of folders "Downloads" of folders of folders "/Users"

Relevance

Used in 222 fixlets and 99 analyses   * Results in a true/false
Show indented relevance
mac of operating system

Sharing

Social Media:
Share this page on Yammer

Comments

Log In or Register to leave comments!