Potential Defense Evasion Via Binary Rename

심각도 보통 Sigma 탐지 룰. Detects the execution of a renamed binary often used by attackers or malware leveraging new Sysmon OriginalFileName datapoint.

작성자: Matthew Green @mgreen27, Ecco, James Pemberton @4A616D6573, oscd.community, Andreas Hunkeler (@Karneades) · 원본 라이선스: DRL 1.1 · SigmaHQ 원본