Remote File Download Via Findstr.EXE
심각도 보통 Sigma 탐지 룰. Detects execution of "findstr" with specific flags and a remote share path. This specific set of CLI flags would allow "findstr" to download…
작성자: Furkan CALISKAN, @caliskanfurkan_, @oscd_initiative, Nasreddine Bencherchali (Nextron Systems) · 원본 라이선스: DRL 1.1 · SigmaHQ 원본