Windows Filtering Platform Blocked Connection From EDR Agent Binary

심각도 높음 Sigma 탐지 룰. Detects a Windows Filtering Platform (WFP) blocked connection event involving common Endpoint Detection and Response (EDR) agents. Adversari…

작성자: @gott_cyber · 원본 라이선스: DRL 1.1 · SigmaHQ 원본