ETW Logging Tamper In .NET Processes Via CommandLine

심각도 높음 Sigma 탐지 룰. Detects changes to environment variables related to ETW logging via the CommandLine. This could indicate potential adversaries stopping ETW …

작성자: Roberto Rodriguez (Cyb3rWard0g), OTR (Open Threat Research) · 원본 라이선스: DRL 1.1 · SigmaHQ 원본