Potential Direct Syscall of NtOpenProcess

심각도 보통 Sigma 탐지 룰. Detects potential calls to NtOpenProcess directly from NTDLL.

작성자: Christian Burkard (Nextron Systems), Tim Shelton (FP) · 원본 라이선스: DRL 1.1 · SigmaHQ 원본