Password Protected ZIP File Opened (Email Attachment) (571498c8-908e-40b4-910b-d2369159a3da)

Detects the extraction of password protected ZIP archives. See the filename variable for more details on which file has been opened.

Cluster A	Galaxy A	Cluster B	Galaxy B	Level
Obfuscated Files or Information - T1027 (b3d682b6-98f2-4fb0-aa3b-b4df007ca70a)	Attack Pattern	Password Protected ZIP File Opened (Email Attachment) (571498c8-908e-40b4-910b-d2369159a3da)	Sigma-Rules	1
Spearphishing Attachment - T1566.001 (2e34237d-8574-43f6-aace-ae2915de8597)	Attack Pattern	Password Protected ZIP File Opened (Email Attachment) (571498c8-908e-40b4-910b-d2369159a3da)	Sigma-Rules	1
Phishing - T1566 (a62a8db3-f23a-4d8f-afd6-9dbc77e7813b)	Attack Pattern	Spearphishing Attachment - T1566.001 (2e34237d-8574-43f6-aace-ae2915de8597)	Attack Pattern	2