Get DomainUser with PowerShell Script Block

Domain Account, Account Discovery

Recursive Delete of Directory In Batch CMD

File Deletion, Indicator Removal

AWS Detect Users with KMS keys performing encryption S3

Data Encrypted for Impact

Kubernetes AWS detect suspicious kubectl calls

Common Ransomware Extensions

Data Destruction