Remote DCOM/WMI Lateral Movement
심각도 높음 Sigma 탐지 룰. Detects remote RPC calls that performs remote DCOM operations. These could be abused for lateral movement via DCOM or WMI.
작성자: Sagie Dulce, Dekel Paz · 원본 라이선스: DRL 1.1 · SigmaHQ 원본
심각도 높음 Sigma 탐지 룰. Detects remote RPC calls that performs remote DCOM operations. These could be abused for lateral movement via DCOM or WMI.
작성자: Sagie Dulce, Dekel Paz · 원본 라이선스: DRL 1.1 · SigmaHQ 원본