cipher.exe - S1205 (da66959d-9875-4fde-bfed-11111a55895e)

cipher.exe is a native Microsoft utility that manages encryption of directories and files on NTFS (New Technology File System) partitions by using the Encrypting File System (EFS).(Citation: cipher.exe)

Cluster A	Galaxy A	Cluster B	Galaxy B	Level
Disk Content Wipe - T1561.001 (fb640c43-aa6b-431e-a961-a279010424ac)	Attack Pattern	cipher.exe - S1205 (da66959d-9875-4fde-bfed-11111a55895e)	mitre-tool	1
Disk Content Wipe - T1561.001 (fb640c43-aa6b-431e-a961-a279010424ac)	Attack Pattern	Disk Wipe - T1561 (1988cc35-ced8-4dad-b2d1-7628488fa967)	Attack Pattern	2