Forest Blizzard APT - Custom Protocol Handler DLL Registry Set

심각도 높음 Sigma 탐지 룰. Detects the setting of the DLL that handles the custom protocol handler. Seen being created by Forest Blizzard APT as reported by MSFT.

관련 CVE: CVE-2022-38028

작성자: Nasreddine Bencherchali (Nextron Systems) · 원본 라이선스: DRL 1.1 · SigmaHQ 원본