Suspicious Usage of For Loop with Recursive Directory Search in CMD

심각도 보통 Sigma 탐지 룰. Detects suspicious usage of the cmd.exe 'for /f' loop combined with the 'tokens=' parameter and a recursive directory listing. This pattern …

작성자: Joseliyo Sanchez, @Joseliyo_Jstnk · 원본 라이선스: DRL 1.1 · SigmaHQ 원본