Detected presence of malicious files through analyst-vetted file reputation. (x7)

Detected presence of known software supply chain attack artifacts. (x7)

Detected presence of embedded debug databases. (x2)

Detected digital signatures that have not been performed with an extended validation certificate. (x1)

Detected digital signatures that rely on a weak digest algorithm for integrity validation. (x1)

Detected Windows executable files that embed PDB files whose integrity is verified with an insecure hashing algorithm. (x2)