Password Protected ZIP File Opened (Suspicious Filenames) — Detection Rule
Detects the extraction of password protected ZIP archives with suspicious file names. See the filename variable for more details on which file has been opened.
Detects the extraction of password protected ZIP archives with suspicious file names. See the filename variable for more details on which file has been opened.