Creation of WerFault.exe/Wer.dll in Unusual Folder

심각도 보통 Sigma 탐지 룰. Detects the creation of a file named "WerFault.exe" or "wer.dll" in an uncommon folder, which could be a sign of WerFault DLL hijacking.

작성자: frack113 · 원본 라이선스: DRL 1.1 · SigmaHQ 원본