Potential Excel.EXE DCOM Lateral Movement Via ActivateMicrosoftApp

심각도 높음 Sigma 탐지 룰. Detects suspicious child processes of Excel which could be an indicator of lateral movement leveraging the "ActivateMicrosoftApp" Excel DCOM…

작성자: Aaron Stratton · 원본 라이선스: DRL 1.1 · SigmaHQ 원본