File Creation In Suspicious Directory By Msdt.EXE

심각도 높음 Sigma 탐지 룰. Detects msdt.exe creating files in suspicious directories which could be a sign of exploitation of either Follina or Dogwalk vulnerabilities

관련 CVE: CVE-2022-30190

작성자: Vadim Varganov, Florian Roth (Nextron Systems) · 원본 라이선스: DRL 1.1 · SigmaHQ 원본