Suspicious PROCEXP152.sys File Created In TMP

심각도 보통 Sigma 탐지 룰. Detects the creation of the PROCEXP152.sys file in the application-data local temporary folder. This driver is used by Sysinternals Process …

작성자: xknow (@xknow_infosec), xorxes (@xor_xes) · 원본 라이선스: DRL 1.1 · SigmaHQ 원본