BITS Transfer Job Download To Potential Suspicious Folder (f8a56cb7-a363-44ed-a82f-5926bb44cd05)
Detects new BITS transfer job where the LocalName/Saved file is stored in a potentially suspicious location
| Cluster A | Galaxy A | Cluster B | Galaxy B | Level |
|---|---|---|---|---|
| BITS Jobs - T1197 (c8e87b83-edbb-48d4-9295-4974897525b7) | Attack Pattern | BITS Transfer Job Download To Potential Suspicious Folder (f8a56cb7-a363-44ed-a82f-5926bb44cd05) | Sigma-Rules | 1 |