Detected presence of files containing domains used for intercepting and inspecting HTTP requests. (x2)

Detected presence of malicious files through analyst-vetted file reputation. (x6)

Detected presence of known software supply chain attack artifacts. (x2)

Detected presence of software components without a declared source code repository. (x3)

Detected presence of software components that have low popularity or number of downloads. (x3)

Detected presence of files with behaviors commonly used by malicious software. (x2)