Potential Hidden Directory Creation Via NTFS INDEX_ALLOCATION Stream

심각도 보통 Sigma 탐지 룰. Detects the creation of hidden file/folder with the "::$index_allocation" stream. Which can be used as a technique to prevent access to fold…

작성자: Scoubi (@ScoubiMtl) · 원본 라이선스: DRL 1.1 · SigmaHQ 원본