Rundll32 InstallScreenSaver Execution

심각도 보통 Sigma 탐지 룰. An attacker may execute an application as a SCR File using rundll32.exe desk.cpl,InstallScreenSaver

작성자: Christopher Peacock @securepeacock, SCYTHE @scythe_io, TactiKoolSec · 원본 라이선스: DRL 1.1 · SigmaHQ 원본