PPL Tampering Via WerFaultSecure

심각도 높음 Sigma 탐지 룰. Detects potential abuse of WerFaultSecure.exe to dump Protected Process Light (PPL) processes like LSASS or to freeze security solutions (ED…

작성자: Jason (https://github.com/0xbcf) · 원본 라이선스: DRL 1.1 · SigmaHQ 원본