Potential Shim Database Persistence via Sdbinst.EXE

심각도 보통 Sigma 탐지 룰. Detects installation of a new shim using sdbinst.exe. Adversaries may establish persistence and/or elevate privileges by executing malicious…

작성자: Markus Neis · 원본 라이선스: DRL 1.1 · SigmaHQ 원본