Intel Name: Potentially suspicious cabinet file expansion
Date of Scan: November 18, 2024
Impact: Medium
Summary: Detects the extraction or decompression of cabinet files from potentially suspicious or uncommon locations, as observed in attacks related to Iranian MeteorExpress.
