Rebuild Performance Counter Values Via Lodctr.EXE

심각도 보통 Sigma 탐지 룰. Detects the execution of "lodctr.exe" to rebuild the performance counter registry values. This can be abused by attackers by providing a mal…

작성자: Nasreddine Bencherchali (Nextron Systems) · 원본 라이선스: DRL 1.1 · SigmaHQ 원본