Proxy Execution via Vshadow
심각도 보통 Sigma 탐지 룰. Detects the invocation of vshadow.exe with the -exec parameter that executes a specified script or command after the shadow copies are creat…
작성자: David Faiss · 원본 라이선스: DRL 1.1 · SigmaHQ 원본
심각도 보통 Sigma 탐지 룰. Detects the invocation of vshadow.exe with the -exec parameter that executes a specified script or command after the shadow copies are creat…
작성자: David Faiss · 원본 라이선스: DRL 1.1 · SigmaHQ 원본