Suspicious MSDT Parent Process

심각도 높음 Sigma 탐지 룰. Detects msdt.exe executed by a suspicious parent as seen in CVE-2022-30190 / Follina exploitation

관련 CVE: CVE-2022-30190

작성자: Nextron Systems · 원본 라이선스: DRL 1.1 · SigmaHQ 원본