Remote Task Creation via ATSVC Named Pipe - Zeek

심각도 보통 Sigma 탐지 룰. Detects remote task creation via at.exe or API interacting with ATSVC namedpipe

작성자: Samir Bousseaden, @neu5rn · 원본 라이선스: DRL 1.1 · SigmaHQ 원본