Lazarus System Binary Masquerading

심각도 높음 Sigma 탐지 룰. Detects binaries used by the Lazarus group which use system names but are executed and launched from non-default location

작성자: Trent Liffick (@tliffick), Bartlomiej Czyz (@bczyz1) · 원본 라이선스: DRL 1.1 · SigmaHQ 원본