Diskshadow Script Mode Execution

심각도 보통 Sigma 탐지 룰. Detects execution of "Diskshadow.exe" in script mode using the "/s" flag. Attackers often abuse "diskshadow" to execute scripts that deleted…

작성자: Ivan Dyachkov, oscd.community · 원본 라이선스: DRL 1.1 · SigmaHQ 원본