Suspicious Use of PsLogList

심각도 보통 Sigma 탐지 룰. Detects usage of the PsLogList utility to dump event log in order to extract admin accounts and perform account discovery or delete events l…

작성자: Nasreddine Bencherchali (Nextron Systems) · 원본 라이선스: DRL 1.1 · SigmaHQ 원본