CobaltStrike Load by Rundll32
심각도 높음 Sigma 탐지 룰. Rundll32 can be use by Cobalt Strike with StartW function to load DLLs from the command line.
작성자: Wojciech Lesicki · 원본 라이선스: DRL 1.1 · SigmaHQ 원본
심각도 높음 Sigma 탐지 룰. Rundll32 can be use by Cobalt Strike with StartW function to load DLLs from the command line.
작성자: Wojciech Lesicki · 원본 라이선스: DRL 1.1 · SigmaHQ 원본