Remote Thread Created In Shell Application

심각도 보통 Sigma 탐지 룰. Detects remote thread creation in command shell applications, such as "Cmd.EXE" and "PowerShell.EXE". It is a common technique used by malwa…

작성자: Splunk Research Team · 원본 라이선스: DRL 1.1 · SigmaHQ 원본