File Decoded From Base64/Hex Via Certutil.EXE

심각도 높음 Sigma 탐지 룰. Detects the execution of certutil with either the "decode" or "decodehex" flags to decode base64 or hex encoded files. This can be abused by…

작성자: Florian Roth (Nextron Systems), Jonhnathan Ribeiro, oscd.community · 원본 라이선스: DRL 1.1 · SigmaHQ 원본