Privilege Escalation via Named Pipe Impersonation
심각도 높음 Sigma 탐지 룰. Detects a remote file copy attempt to a hidden network share. This may indicate lateral movement or data staging activity.
작성자: Tim Rauch, Elastic (idea) · 원본 라이선스: DRL 1.1 · SigmaHQ 원본