Potentially Suspicious Regsvr32 HTTP IP Pattern
심각도 높음 Sigma 탐지 룰. Detects regsvr32 execution to download and install DLLs located remotely where the address is an IP address.
작성자: Florian Roth (Nextron Systems) · 원본 라이선스: DRL 1.1 · SigmaHQ 원본
심각도 높음 Sigma 탐지 룰. Detects regsvr32 execution to download and install DLLs located remotely where the address is an IP address.
작성자: Florian Roth (Nextron Systems) · 원본 라이선스: DRL 1.1 · SigmaHQ 원본