Detection of Data Encrypted for Impact

ID: DET0678
Domains: Mobile
Analytics: AN1781
Version: 1.0
Created: 21 October 2025
Last Modified: 21 October 2025

Analytics

AN1781

Application vetting services may be able to detect if an application attempts to encrypt files, although this may be benign behavior.

Log Sources
Data Component Name Channel
API Calls (DC0112) Application Vetting None