coldbraid

Selective Exclusion T1679

Adversaries may intentionally exclude certain files, folders, directories, file types, or system components from encryption or tampering during a ransomware or malicious payload execution. Some file extensions that adversaries may avoid encrypting include `.dll`, `.exe`, and `.lnk`. Adversaries…

Tactics
Stealth
Actors using it
1
Sub-techniques
0

Threat actors