Potential Proxy Execution Via Explorer.EXE From Shell Process

심각도 낮음 Sigma 탐지 룰. Detects the creation of a child "explorer.exe" process from a shell like process such as "cmd.exe" or "powershell.exe". Attackers can use "e…

작성자: Furkan CALISKAN, @caliskanfurkan_, @oscd_initiative · 원본 라이선스: DRL 1.1 · SigmaHQ 원본