ETW Trace Evasion Activity

심각도 높음 Sigma 탐지 룰. Detects command line activity that attempts to tamper with Event Tracing for Windows (ETW) by clearing or disabling trace logs or providers.…

작성자: @neu5ron, Florian Roth (Nextron Systems), Jonhnathan Ribeiro, oscd.community · 원본 라이선스: DRL 1.1 · SigmaHQ 원본