Load Of RstrtMgr.DLL By A Suspicious Process

심각도 높음 Sigma 탐지 룰. Detects the load of RstrtMgr DLL (Restart Manager) by a suspicious process. This library has been used during ransomware campaigns to kill p…

작성자: Luc Génaux · 원본 라이선스: DRL 1.1 · SigmaHQ 원본