Msiexec.EXE Initiated Network Connection Over HTTP

심각도 낮음 Sigma 탐지 룰. Detects a network connection initiated by an "Msiexec.exe" process over port 80 or 443. Adversaries might abuse "msiexec.exe" to install and…

작성자: frack113 · 원본 라이선스: DRL 1.1 · SigmaHQ 원본