Suspicious Svchost Process Access
심각도 높음 Sigma 탐지 룰. Detects suspicious access to the "svchost" process such as that used by Invoke-Phantom to kill the thread of the Windows event logging servi…
작성자: Tim Burrell · 원본 라이선스: DRL 1.1 · SigmaHQ 원본
심각도 높음 Sigma 탐지 룰. Detects suspicious access to the "svchost" process such as that used by Invoke-Phantom to kill the thread of the Windows event logging servi…
작성자: Tim Burrell · 원본 라이선스: DRL 1.1 · SigmaHQ 원본