Ss-bet-001_s.7z -
.7z (a 7-Zip compressed archive), often protected with a password.
Volt Typhoon (also known as Bronze Silhouette or Vanguard Panda). SS-Bet-001_s.7z
Audit 7z.exe executions, especially those involving temporary or public directories. .7z (a 7-Zip compressed archive)
Forward Windows Event Logs to a hardened, segmented server to prevent actors from clearing their tracks. SS-Bet-001_s.7z
The actor uses the 7z.exe utility to compress and password-protect stolen data before exfiltrating it from the victim's network.