WannaCry (deprecated)

This content extension is no longer supported as a standalone content extension. The content in this content extension has been merged with the Endpoint content extension.

The IBM® QRadar® Endpoint content extension includes ransomware detection rules for Bad Rabbit, Maze, Not Petya, Petya, Revil/Sodinokibi/Sodin, and WannaCry, as well as more general ransomware behaviour.