PUA - Potential PE Metadata Tamper Using Rcedit

심각도 보통 Sigma 탐지 룰. Detects the use of rcedit to potentially alter executable PE metadata properties, which could conceal efforts to rename system utilities for…

작성자: Micah Babinski · 원본 라이선스: DRL 1.1 · SigmaHQ 원본