CodePage Modification Via MODE.COM

심각도 낮음 Sigma 탐지 룰. Detects a CodePage modification using the "mode.com" utility. This behavior has been used by threat actors behind Dharma ransomware.

작성자: Nasreddine Bencherchali (Nextron Systems), Joseliyo Sanchez, @Joseliyo_Jstnk · 원본 라이선스: DRL 1.1 · SigmaHQ 원본