Detected presence of malicious files through analyst-vetted file reputation. (x6)

Detected presence of known software supply chain attack artifacts. (x6)

Detected presence of suspicious files through file reputation or third-party scanners. (x1)