Use of TTDInject.exe

심각도 보통 Sigma 탐지 룰. Detects the executiob of TTDInject.exe, which is used by Windows 10 v1809 and newer to debug time travel (underlying call of tttracer.exe)

작성자: frack113 · 원본 라이선스: DRL 1.1 · SigmaHQ 원본