Conhost Spawned By Uncommon Parent Process

심각도 보통 Sigma 탐지 룰. Detects when the Console Window Host (conhost.exe) process is spawned by an uncommon parent process, which could be indicative of potential …

작성자: Tim Rauch, Elastic (idea) · 원본 라이선스: DRL 1.1 · SigmaHQ 원본