Potential Executable Run Itself As Sacrificial Process

심각도 낮음 Sigma 탐지 룰. Detects when an executable launches an identical instance of itself, a behavior often used to create a suspended “sacrificial” process for c…

작성자: frack113 · 원본 라이선스: DRL 1.1 · SigmaHQ 원본