Suspicious Volume Shadow Copy VSS_PS.dll Load

심각도 높음 Sigma 탐지 룰. Detects the image load of vss_ps.dll by uncommon executables. This DLL is used by the Volume Shadow Copy Service (VSS) to manage shadow copi…

작성자: Markus Neis, @markus_neis · 원본 라이선스: DRL 1.1 · SigmaHQ 원본