Remote Access Tool - NetSupport Execution From Unusual Location

심각도 보통 Sigma 탐지 룰. Detects execution of client32.exe (NetSupport RAT) from an unusual location (outside of 'C:\Program Files')

작성자: Nasreddine Bencherchali (Nextron Systems) · 원본 라이선스: DRL 1.1 · SigmaHQ 원본