ISO File Created Within Temp Folders
심각도 높음 Sigma 탐지 룰. Detects the creation of a ISO file in the Outlook temp folder or in the Appdata temp folder. Typical of Qakbot TTP from end-July 2022.
작성자: @sam0x90 · 원본 라이선스: DRL 1.1 · SigmaHQ 원본
심각도 높음 Sigma 탐지 룰. Detects the creation of a ISO file in the Outlook temp folder or in the Appdata temp folder. Typical of Qakbot TTP from end-July 2022.
작성자: @sam0x90 · 원본 라이선스: DRL 1.1 · SigmaHQ 원본