Potentially Suspicious Execution From Parent Process In Public Folder

심각도 높음 Sigma 탐지 룰. Detects a potentially suspicious execution of a parent process located in the "\Users\Public" folder executing a child process containing re…

작성자: Florian Roth (Nextron Systems), Nasreddine Bencherchali (Nextron Systems) · 원본 라이선스: DRL 1.1 · SigmaHQ 원본