COLDSTEEL RAT Service Persistence Execution

심각도 치명 Sigma 탐지 룰. Detects the creation of an "svchost" process with specific command line flags, that were seen present and used by ColdSteel RAT

작성자: X__Junior (Nextron Systems) · 원본 라이선스: DRL 1.1 · SigmaHQ 원본