Devcon Execution Disabling VMware VMCI Device

심각도 높음 Sigma 탐지 룰. Detects execution of devcon.exe with commands that disable the VMware Virtual Machine Communication Interface (VMCI) device. This can be leg…

작성자: Matt Anderson, Dray Agha, Anna Pham (Huntress) · 원본 라이선스: DRL 1.1 · SigmaHQ 원본