DFIR WinRAR split archives – How much data was exfiltrated The situation and the setup In a recent ransomware engagement we lacked the proper insight on how much data had been exfiltrated. We had artefacts telling us there was 5 …