Potential Privilege Escalation Attempt Via .Exe.Local Technique

심각도 높음 Sigma 탐지 룰. Detects potential privilege escalation attempt via the creation of the "*.Exe.Local" folder inside the "System32" directory in order to side…

작성자: Nasreddine Bencherchali (Nextron Systems), Subhash P (@pbssubhash) · 원본 라이선스: DRL 1.1 · SigmaHQ 원본