Potential Defense Evasion Via Rename Of Highly Relevant Binaries

심각도 높음 Sigma 탐지 룰. Detects the execution of a renamed binary often used by attackers or malware leveraging new Sysmon OriginalFileName datapoint.

작성자: Matthew Green - @mgreen27, Florian Roth (Nextron Systems), frack113 · 원본 라이선스: DRL 1.1 · SigmaHQ 원본