EventLog Query Requests By Builtin Utilities

심각도 보통 Sigma 탐지 룰. Detect attempts to query the contents of the event log using command line utilities. Attackers use this technique in order to look for sensi…

작성자: Ali Alwashali, Nasreddine Bencherchali (Nextron Systems) · 원본 라이선스: DRL 1.1 · SigmaHQ 원본