Suspicious File Downloaded From Direct IP Via Certutil.EXE

심각도 높음 Sigma 탐지 룰. Detects the execution of certutil with certain flags that allow the utility to download files from direct IPs.

작성자: Nasreddine Bencherchali (Nextron Systems) · 원본 라이선스: DRL 1.1 · SigmaHQ 원본