WMI ActiveScriptEventConsumers Activity Via Scrcons.EXE DLL Load

심각도 보통 Sigma 탐지 룰. Detects signs of the WMI script host process "scrcons.exe" loading scripting DLLs which could indicates WMI ActiveScriptEventConsumers Event…

작성자: Roberto Rodriguez (Cyb3rWard0g), OTR (Open Threat Research) · 원본 라이선스: DRL 1.1 · SigmaHQ 원본