AF020
Deletion of Volume Shadow Copy - AR5
Contributor: Joshua Phillips @ SOC Analyst, Viasat - Section AF020
PR020.003
Misclassification of Sensitivity Labels - AR3
Contributor: Joshua Phillips @ SOC Analyst, Viasat - Subsection PR020.003
DT087
USB MountPoints2 - DT087
Contributor: Joshua Phillips @ SOC Analyst, Viasat - Detection DT087
DT091
MFT Entry Number Sequence Irregularities - DT091
Contributor: Joshua Phillips @ SOC Analyst, Viasat - Detection DT091
DT092
MFT Unusual Timestamp Patterns - DT092
Contributor: Joshua Phillips @ SOC Analyst, Viasat - Detection DT092
DT093
MFT and Shimcache Executable Timestamp Comparison - DT093
Contributor: Joshua Phillips @ SOC Analyst, Viasat - Detection DT093