Potential Rundll32 Execution With DLL Stored In ADS
심각도 높음 Sigma 탐지 룰. Detects execution of rundll32 where the DLL being called is stored in an Alternate Data Stream (ADS).
작성자: Harjot Singh, '@cyb3rjy0t' · 원본 라이선스: DRL 1.1 · SigmaHQ 원본
심각도 높음 Sigma 탐지 룰. Detects execution of rundll32 where the DLL being called is stored in an Alternate Data Stream (ADS).
작성자: Harjot Singh, '@cyb3rjy0t' · 원본 라이선스: DRL 1.1 · SigmaHQ 원본