WebDav Client Execution Via Rundll32.EXE

심각도 보통 Sigma 탐지 룰. Detects "svchost.exe" spawning "rundll32.exe" with command arguments like "C:\windows\system32\davclnt.dll,DavSetCookie". This could be an i…

작성자: Roberto Rodriguez (Cyb3rWard0g), OTR (Open Threat Research) · 원본 라이선스: DRL 1.1 · SigmaHQ 원본