MSHTA Execution with Suspicious File Extensions

심각도 높음 Sigma 탐지 룰. Detects execution of mshta.exe with file types that looks like they do not typically represent HTA (HTML Application) content, such as .png,…

작성자: Diego Perez (@darkquassar), Markus Neis, Swisscom (Improve Rule), Swachchhanda Shrawan Poudel (Nextron Systems) · 원본 라이선스: DRL 1.1 · SigmaHQ 원본