Sysmon File Executable Creation Detected
심각도 보통 Sigma 탐지 룰. Detects Portable Executable (PE) files creation events logged by Sysmon in paths monitored by the used Sysmon configuration. This is a high-…
작성자: frack113 · 원본 라이선스: DRL 1.1 · SigmaHQ 원본
심각도 보통 Sigma 탐지 룰. Detects Portable Executable (PE) files creation events logged by Sysmon in paths monitored by the used Sysmon configuration. This is a high-…
작성자: frack113 · 원본 라이선스: DRL 1.1 · SigmaHQ 원본