Selective Exclusion T1679
Adversaries may intentionally exclude certain files, folders, directories, file types, or system components from encryption or tampering during a ransomware or malicious payload execution. Some file extensions that adversaries may avoid encrypting include `.dll`, `.exe`, and `.lnk`. Adversaries…
- Tactics
- Stealth
- Actors using it
- 1
- Sub-techniques
- 0