Potentially Suspicious WDAC Policy File Creation

심각도 보통 Sigma 탐지 룰. Detects suspicious Windows Defender Application Control (WDAC) policy file creation from abnormal processes that could be abused by attacker…

작성자: X__Junior · 원본 라이선스: DRL 1.1 · SigmaHQ 원본