elastic / elastic/protections-artifacts
[FPR] Ransomware Protection - MOTW Handling
Open
Artifact: ransomware
false positive
- Dominant language
- YARA
- Stars
- 1.5k
- Forks
- 169
- Avg merge
- 29m
- Merged PRs (30d)
- 2
Description
User recently encountered a FP in our ransomware protection which appears to be caused by mishandling MOTW files.
Our research team is currently investigating the issue and will publish a mitigating artifact once resolved.
- [ ] Investigate and Resolve
- [ ] Testing
- [ ] Diagnostic artifact sanity check
- [ ] Production artifact
Contributor guide
No contributing guide indexed for this repository
Assessment
This issue has not been assessed yet.