Drop Binaries Into Spool Drivers Color Folder

심각도 보통 Sigma 탐지 룰. Detects the creation of suspcious binary files inside the "\windows\system32\spool\drivers\color\" as seen in the blog referenced below

작성자: Nasreddine Bencherchali (Nextron Systems) · 원본 라이선스: DRL 1.1 · SigmaHQ 원본