HH.EXE Initiated HTTP Network Connection

심각도 보통 Sigma 탐지 룰. Detects a network connection initiated by the "hh.exe" process to HTTP destination ports, which could indicate the execution/download of rem…

작성자: Nasreddine Bencherchali (Nextron Systems) · 원본 라이선스: DRL 1.1 · SigmaHQ 원본