RedSun - Conhost.exe Spawned by TieringEngineService.exe

심각도 높음 Sigma 탐지 룰. Detects two stages of the RedSun post-exploitation process chain that deliver a SYSTEM-level shell to the attacker's interactive session. Ob…

작성자: Swachchhanda Shrawan Poudel (Nextron Systems), @unresolvedhost · 원본 라이선스: DRL 1.1 · SigmaHQ 원본