ATT&CKcon 7.0 in-person tickets are open! Join us October 27-28, 2026 in McLean, VA. Register here for in-person tickets; hotel and location details can be found in the FAQ.
Identify potentially malicious software that may be used to access logical drives in this manner, and audit and/or block it by using whitelisting tools, like AppLocker, or Software Restriction Policies where appropriate.