Suspicious Wordpad Outbound Connections
심각도 보통 Sigma 탐지 룰. Detects a network connection initiated by "wordpad.exe" over uncommon destination ports. This might indicate potential process injection act…
작성자: X__Junior (Nextron Systems) · 원본 라이선스: DRL 1.1 · SigmaHQ 원본