Potential Binary Impersonating Sysinternals Tools

심각도 보통 Sigma 탐지 룰. Detects binaries that use the same name as legitimate sysinternals tools to evade detection. This rule looks for the execution of binaries t…

작성자: frack113, Swachchhanda Shrawan Poudel (Nextron Systems) · 원본 라이선스: DRL 1.1 · SigmaHQ 원본