Here we show you how to hunt for the current variant of the REvil Ransomware involved in the Kaseya supply chain attack.

Need a Penetration Test or help with Threat Hunting? https://cyberlinx.co.za/

SIEM Query: file.hash.sha256 : d55f983c994caa160ec63a59f6b4250fe67fb3e8c43a388aec60a4a6978e9f1e or 8dd620d9aeb35960bb766458c8890ede987c33d239cf730f93fe49d90ae759dd

References:
https://github.com/cado-security