RIFT
demo.personalCabinet

demo.readOnlyTitle demo.readOnlyLead

demo.breadcrumb

NIGHTFOX

PIN A9CA0B93
statusUi.verdict.detected

demo.verdictTitle

demo.verdictLead

CS2Windows 1122:17–22:22demo.createdBy: Demo
demo.risk
78/100
demo.analysisKicker

demo.analysisTitle

demo.analysisBody

CRITICAL+45
demo.ruleUsb
KINGSTON DT 3.0 · E:\\ — 212 files
HIGH+21
demo.ruleInjector
AIM_ASSIST.EXE · Prefetch
MEDIUM+12
demo.ruleCleanup
Event log · cleared at 22:20
INFO0
demo.ruleSystem
Secure Boot · enabled
demo.timeline
22:17:41
demo.timelineStart
22:19:04
demo.timelineUsb
22:20:18
demo.timelineCleanup
22:21:37
demo.timelineFiles
22:22:03
demo.timelineDone
demo.evidenceKicker

demo.evidenceTitle

demo.readOnly
demo.sourcedemo.eventdemo.valuedemo.time
PrefetchExecutionC:\\Users\\Player\\Downloads\\AIM_ASSIST.EXE22:17:41
USBMounted deviceKINGSTON DT 3.0 · E:\\22:19:04
USNBulk file activity212 files · 1.4 GB22:21:37