Suspicious High IntegrityLevel Conhost Legacy Option

심각도 참고 Sigma 탐지 룰. ForceV1 asks for information directly from the kernel space. Conhost connects to the console application. High IntegrityLevel means the proc…

작성자: frack113 · 원본 라이선스: DRL 1.1 · SigmaHQ 원본