Registry Set With Crypto-Classes From The "Cryptography" PowerShell Namespace
심각도 보통 Sigma 탐지 룰. Detects the setting of a registry inside the "\Shell\Open\Command" value with PowerShell classes from the "System.Security.Cryptography" nam…
작성자: Andreas Braathen (mnemonic.io) · 원본 라이선스: DRL 1.1 · SigmaHQ 원본