Sysmon Discovery Via Default Driver Altitude Using Findstr.EXE

심각도 높음 Sigma 탐지 룰. Detects usage of "findstr" with the argument "385201". Which could indicate potential discovery of an installed Sysinternals Sysmon service …

작성자: frack113 · 원본 라이선스: DRL 1.1 · SigmaHQ 원본