Suspicious PsExec Execution
심각도 높음 Sigma 탐지 룰. detects execution of psexec or paexec with renamed service name, this rule helps to filter out the noise if psexec is used for legit purpose…
작성자: Samir Bousseaden · 원본 라이선스: DRL 1.1 · SigmaHQ 원본
심각도 높음 Sigma 탐지 룰. detects execution of psexec or paexec with renamed service name, this rule helps to filter out the noise if psexec is used for legit purpose…
작성자: Samir Bousseaden · 원본 라이선스: DRL 1.1 · SigmaHQ 원본