demo.readOnlyTitle demo.readOnlyLead
demo.breadcrumb
NIGHTFOX
statusUi.verdict.detected
demo.verdictTitle
demo.verdictLead
CS2Windows 1122:17–22:22demo.createdBy: Demo
demo.risk
78/100
demo.analysisKicker
demo.analysisTitle
demo.analysisBody
CRITICAL+45
demo.ruleUsb
KINGSTON DT 3.0 · E:\\ — 212 files
HIGH+21
demo.ruleInjector
AIM_ASSIST.EXE · Prefetch
MEDIUM+12
demo.ruleCleanup
Event log · cleared at 22:20
INFO0
demo.ruleSystem
Secure Boot · enabled
demo.timeline
22:17:41
demo.timelineStart
22:19:04
demo.timelineUsb
22:20:18
demo.timelineCleanup
22:21:37
demo.timelineFiles
22:22:03
demo.timelineDone
demo.evidenceKicker
demo.evidenceTitle
| demo.source | demo.event | demo.value | demo.time |
|---|---|---|---|
| Prefetch | Execution | C:\\Users\\Player\\Downloads\\AIM_ASSIST.EXE | 22:17:41 |
| USB | Mounted device | KINGSTON DT 3.0 · E:\\ | 22:19:04 |
| USN | Bulk file activity | 212 files · 1.4 GB | 22:21:37 |