topic Re: C:\ProgramData\Cyvera\Ransomware folder in Cortex XDR Discussions

C:\ProgramData\Cyvera\Ransomware folder

Panagiss — Tue, 19 Sep 2023 12:28:53 GMT

Hello there,

What is the purpose of this folder(C:\ProgramData\Cyvera\Ransomware) for Cyvera? Couldn't find even a mention for it so it decided to ask the community.

Thanks

Re: C:\ProgramData\Cyvera\Ransomware folder

aspatil — Tue, 19 Sep 2023 13:02:45 GMT

Hello,

This folder contains decoy / honeypot files placed by Cortex XDR agent attempting to detect ransomware attacks.

Re: C:\ProgramData\Cyvera\Ransomware folder

SeanDeHarris — Wed, 20 Sep 2023 01:39:34 GMT

Those decoy files are hidden and located in several folders ... hehe