Use of VisualUiaVerifyNative.exe

심각도 보통 Sigma 탐지 룰. VisualUiaVerifyNative.exe is a Windows SDK that can be used for AWL bypass and is listed in Microsoft's recommended block rules.

작성자: Christopher Peacock @SecurePeacock, SCYTHE @scythe_io · 원본 라이선스: DRL 1.1 · SigmaHQ 원본