Execute From Alternate Data Streams
심각도 보통 Sigma 탐지 룰. Detects execution from an Alternate Data Stream (ADS). Adversaries may use NTFS file attributes to hide their malicious data in order to eva…
작성자: frack113 · 원본 라이선스: DRL 1.1 · SigmaHQ 원본
심각도 보통 Sigma 탐지 룰. Detects execution from an Alternate Data Stream (ADS). Adversaries may use NTFS file attributes to hide their malicious data in order to eva…
작성자: frack113 · 원본 라이선스: DRL 1.1 · SigmaHQ 원본