One Drive, Double Agent: Clouded OneDrive Turns Sides

Over the last 10 years, ransomware attacks have become the main cybersecurity risk. More than 200 different ransomware families have been used in the wild. Most of them are fairly similar. EDRs can prevent most of them generically with decoy file traps, monitoring for processes that modify many files, or by monitoring common pre-encryption actions such as shadow copy deletion...

By: Or Yair

Full Abstract and Presentation Materials:
https://www.blackhat.com/us-23/briefings/schedule/#one-drive-double-agent-clouded-onedrive-turns-sides-32695

agent attacks can cybersecurity cybersecurity risk decoy drive edrs families file files main monitoring one drive onedrive processes ransomware ransomware attacks risk