Suspicious Child Process Created as System

심각도 높음 Sigma 탐지 룰. Detection of child processes spawned with SYSTEM privileges by parents with LOCAL SERVICE or NETWORK SERVICE accounts

작성자: Teymur Kheirkhabarov, Roberto Rodriguez (@Cyb3rWard0g), Open Threat Research (OTR) · 원본 라이선스: DRL 1.1 · SigmaHQ 원본