Potential PowerShell Execution Via DLL

심각도 높음 Sigma 탐지 룰. Detects potential PowerShell execution from a DLL instead of the usual PowerShell process as seen used in PowerShdll. This detection assumes…

작성자: Markus Neis, Nasreddine Bencherchali (Nextron Systems) · 원본 라이선스: DRL 1.1 · SigmaHQ 원본