XSL Script Execution Via WMIC.EXE

심각도 보통 Sigma 탐지 룰. Detects the execution of WMIC with the "format" flag to potentially load local XSL files. Adversaries abuse this functionality to execute ar…

작성자: Timur Zinniatullin, oscd.community, Swachchhanda Shrawan Poudel · 원본 라이선스: DRL 1.1 · SigmaHQ 원본