MITRE BZAR Indicators for Execution
심각도 보통 Sigma 탐지 룰. Windows DCE-RPC functions which indicate an execution techniques on the remote system. All credit for the Zeek mapping of the suspicious end…
작성자: @neu5ron, SOC Prime · 원본 라이선스: DRL 1.1 · SigmaHQ 원본