Forfiles Command Execution

심각도 보통 Sigma 탐지 룰. Detects the execution of "forfiles" with the "/c" flag. While this is an expected behavior of the tool, it can be abused in order to proxy e…

작성자: Tim Rauch, Elastic, E.M. Anhaus (originally from Atomic Blue Detections, Endgame), oscd.community · 원본 라이선스: DRL 1.1 · SigmaHQ 원본