Formbook Process Creation

심각도 높음 Sigma 탐지 룰. Detects Formbook like process executions that inject code into a set of files in the System32 folder, which executes a special command comma…

작성자: Florian Roth (Nextron Systems), oscd.community, Jonhnathan Ribeiro · 원본 라이선스: DRL 1.1 · SigmaHQ 원본