Suspicious Shim Database Patching Activity

심각도 높음 Sigma 탐지 룰. Detects installation of new shim databases that try to patch sections of known processes for potential process injection or persistence.

작성자: Nasreddine Bencherchali (Nextron Systems) · 원본 라이선스: DRL 1.1 · SigmaHQ 원본