RunDLL32 Spawning Explorer
심각도 높음 Sigma 탐지 룰. Detects RunDLL32.exe spawning explorer.exe as child, which is very uncommon, often observes Gamarue spawning the explorer.exe process in an …
작성자: elhoim, CD_ROM_ · 원본 라이선스: DRL 1.1 · SigmaHQ 원본
심각도 높음 Sigma 탐지 룰. Detects RunDLL32.exe spawning explorer.exe as child, which is very uncommon, often observes Gamarue spawning the explorer.exe process in an …
작성자: elhoim, CD_ROM_ · 원본 라이선스: DRL 1.1 · SigmaHQ 원본