Suspicious New Instance Of An Office COM Object

심각도 보통 Sigma 탐지 룰. Detects an svchost process spawning an instance of an office application. This happens when the initial word application creates an instance…

작성자: Nasreddine Bencherchali (Nextron Systems) · 원본 라이선스: DRL 1.1 · SigmaHQ 원본