Potential Persistence Attempt Via ErrorHandler.Cmd

심각도 보통 Sigma 탐지 룰. Detects creation of a file named "ErrorHandler.cmd" in the "C:\WINDOWS\Setup\Scripts\" directory which could be used as a method of persiste…

작성자: Nasreddine Bencherchali (Nextron Systems) · 원본 라이선스: DRL 1.1 · SigmaHQ 원본