WFP Filter Added via Registry
심각도 보통 Sigma 탐지 룰. Detects registry modifications that add Windows Filtering Platform (WFP) filters, which may be used to block security tools and EDR agents f…
작성자: Frack113 · 원본 라이선스: DRL 1.1 · SigmaHQ 원본
심각도 보통 Sigma 탐지 룰. Detects registry modifications that add Windows Filtering Platform (WFP) filters, which may be used to block security tools and EDR agents f…
작성자: Frack113 · 원본 라이선스: DRL 1.1 · SigmaHQ 원본