Potential CVE-2023-36874 Exploitation - Fake Wermgr Execution

심각도 높음 Sigma 탐지 룰. Detects the execution of a renamed "cmd", "powershell" or "powershell_ise" binary. Attackers were seen using these binaries in a renamed for…

관련 CVE: CVE-2023-36874

작성자: Nasreddine Bencherchali (Nextron Systems) · 원본 라이선스: DRL 1.1 · SigmaHQ 원본