Dllhost.EXE Initiated Network Connection To Non-Local IP Address

심각도 보통 Sigma 탐지 룰. Detects Dllhost.EXE initiating a network connection to a non-local IP address. Aside from Microsoft own IP range that needs to be excluded. …

작성자: bartblaze · 원본 라이선스: DRL 1.1 · SigmaHQ 원본