Mshtml.DLL RunHTMLApplication Suspicious Usage

심각도 높음 Sigma 탐지 룰. Detects execution of commands that leverage the "mshtml.dll" RunHTMLApplication export to run arbitrary code via different protocol handlers…

작성자: Nasreddine Bencherchali (Nextron Systems), Florian Roth (Nextron Systems), Josh Nickels, frack113, Zaw Min Htun (ZETA) · 원본 라이선스: DRL 1.1 · SigmaHQ 원본