Suspicious IIS URL GlobalRules Rewrite Via AppCmd

심각도 보통 Sigma 탐지 룰. Detects usage of "appcmd" to create new global URL rewrite rules. This behaviour has been observed being used by threat actors to add new ru…

작성자: Nasreddine Bencherchali (Nextron Systems) · 원본 라이선스: DRL 1.1 · SigmaHQ 원본