Potential Hidden Directory Creation Via NTFS INDEX_ALLOCATION Stream - CLI

심각도 보통 Sigma 탐지 룰. Detects command line containing reference to the "::$index_allocation" stream, which can be used as a technique to prevent access to folders…

작성자: Nasreddine Bencherchali (Nextron Systems), Scoubi (@ScoubiMtl) · 원본 라이선스: DRL 1.1 · SigmaHQ 원본