OneDriveTemp Folder holder hashes

Copper Contributor

I have a user who's OneDriveTemp folder has a file with just hashes but these hashes are triggering alerts in our EDR tool. The hashes don't return any results in analysis tools such as VirusTotal and we have deleted the file in the past but it gets recreated.

1 Reply
This isn't really a Microsoft Sentinel question.