FunkLocker Ransomware File Creation — Detection Rule

Detects the creation of files with the ".funksec" extension, which is appended to encrypted files by the FunkLocker ransomware.

Read the full analysis on IntelFusions