Skip to content
Threat Feed

Tag

Raccine

1 brief RSS
high advisory

Raccine Scheduled Task Deletion via Schtasks

Detection of adversaries deleting the Raccine Rules Updater scheduled task via `schtasks.exe` to disable the ransomware protection tool, potentially leading to data encryption and loss.

Splunk Enterprise +2 raccine ransomware defense-evasion scheduled-task windows
2r