🎯 Anti-forensics / cleanup

The items that name it 2

• Ransomware incidents in Japan in the first half of 2026: Investigation of The Gentlemen’s infrastructure and evidence of Qilin's AI use
  article2026-09-17

  Deletion of credential dumps, scan results, Responder-related files, pivoting tools, and temporary files from the attacker-controlled server after each operation phase.

• Huntress: How Attackers Abuse VSS, and How Huntress Detects It
  article2026-09-15

  Attacker attempted to delete shadow copies they had just created to cover their tracks; attempt was blocked and flagged by endpoint antivirus