Zone.Identifier: A Coupe Of Observations, (Sat, Jul 18th)

Malware News
1

In diary entry “Sysmon and Alternate Data Streams”, we reported that Sysmon records the content of small Alternate Data Streams (containing text) in the event log.

Article Link: https://isc.sans.edu/diary/rss/26366