Remove ransomed files from disk
Tactic: Impact
Cleanup all the encrypted and decrypted files containing the suffixes ".encrypted-operator" and ".decrypted-operator".
It can easily be modified to target all files, specific extensions, and so on, to delete files off a disk.
View Command
To view this TTPs command, you must be logged in with a professional or enterprise license.
LoginTest this TTP
Download Operator (1.7.1)
Test this TTP using one of our Operator chainsDeploy a safe cross-platform ransomware attack.
Ransomware
2021-08-10
Follow @preludeorg on Twitter for new chains and more.
Join the Prelude Discord to discuss chains and more.
Keep up to date with code changes and community activity on Github