IEEE/ICACT20210191 Slide.08        [Big Slide]       Oral Presentation
When RAASNet ransomware is infected in the client's /testt directory, you can check the changes in st size, st blocks, atime, mtime, and ctime as shown in the picture above through GRR File Finder Flow.

[Go to Next Slide]
Select Voice: