COLDSTEEL RAT Anonymous User Process Execution

심각도 높음 Sigma 탐지 룰. Detects the creation of a process executing as user called "ANONYMOUS" seen used by the "MileStone2016" variant of COLDSTEEL

작성자: Nasreddine Bencherchali (Nextron Systems) · 원본 라이선스: DRL 1.1 · SigmaHQ 원본