highstableEmerging Threat
Potential Snatch Ransomware Activity
Detects specific process characteristics of Snatch ransomware word document droppers
windowsprocess_creation
2025-10-19
Snatch is tracked here as a malware family or toolset with 1 Sigma detection spanning 2019. Coverage centers on windows / process_creation.
Detects specific process characteristics of Snatch ransomware word document droppers