Potential PSFactoryBuffer COM Hijacking

심각도 높음 Sigma 탐지 룰. Detects changes to the PSFactory COM InProcServer32 registry. This technique was used by RomCom to create persistence storing a malicious DL…

작성자: BlackBerry Threat Research and Intelligence Team - @Joseliyo_Jstnk · 원본 라이선스: DRL 1.1 · SigmaHQ 원본