Suspicious Cabinet File Execution Via Msdt.EXE

심각도 보통 Sigma 탐지 룰. Detects execution of msdt.exe using the "cab" flag which could indicates suspicious diagcab files with embedded answer files leveraging CVE-…

관련 CVE: CVE-2022-30190

작성자: Nasreddine Bencherchali (Nextron Systems), GossiTheDog, frack113 · 원본 라이선스: DRL 1.1 · SigmaHQ 원본