Detecting Rclone – An Effective Tool for Exfiltration

NCC Group CIRT has responded to a large number of ransomware cases where frequently the open source tool Rclone being used for data exfiltration. We provide some techniques for detection.

Article Link: Detecting Rclone – An Effective Tool for Exfiltration – NCC Group Research