Potential KamiKakaBot Activity - Winlogon Shell Persistence

심각도 높음 Sigma 탐지 룰. Detects changes to the "Winlogon" registry key where a process will set the value of the "Shell" to a value that was observed being used by …

작성자: Nasreddine Bencherchali (Nextron Systems), X__Junior · 원본 라이선스: DRL 1.1 · SigmaHQ 원본