Use of Wfc.exe
심각도 보통 Sigma 탐지 룰. The Workflow Command-line Compiler can be used for AWL bypass and is listed in Microsoft's recommended block rules.
작성자: Christopher Peacock @SecurePeacock, SCYTHE @scythe_io · 원본 라이선스: DRL 1.1 · SigmaHQ 원본
심각도 보통 Sigma 탐지 룰. The Workflow Command-line Compiler can be used for AWL bypass and is listed in Microsoft's recommended block rules.
작성자: Christopher Peacock @SecurePeacock, SCYTHE @scythe_io · 원본 라이선스: DRL 1.1 · SigmaHQ 원본