Outbound Network Connection To Public IP Via Winlogon

심각도 보통 Sigma 탐지 룰. Detects a "winlogon.exe" process that initiate network communications with public IP addresses

관련 CVE: CVE-2022-21894

작성자: Christopher Peacock @securepeacock, SCYTHE @scythe_io · 원본 라이선스: DRL 1.1 · SigmaHQ 원본