Remote Encrypting File System Abuse

심각도 높음 Sigma 탐지 룰. Detects remote RPC calls to possibly abuse remote encryption service via MS-EFSR

관련 CVE: CVE-2021-36942

작성자: Sagie Dulce, Dekel Paz · 원본 라이선스: DRL 1.1 · SigmaHQ 원본