Outbound Network Connection Initiated By Script Interpreter

심각도 높음 Sigma 탐지 룰. Detects a script interpreter wscript/cscript opening a network connection to a non-local network. Adversaries may use script to download mal…

작성자: frack113, Florian Roth (Nextron Systems) · 원본 라이선스: DRL 1.1 · SigmaHQ 원본