Windows Backup Deleted Via Wbadmin.EXE

심각도 보통 Sigma 탐지 룰. Detects the deletion of backups or system state backups via "wbadmin.exe". This technique is used by numerous ransomware families and actors…

작성자: frack113, Nasreddine Bencherchali (Nextron Systems) · 원본 라이선스: DRL 1.1 · SigmaHQ 원본