Potential DLL Sideloading Via DeviceEnroller.EXE

심각도 보통 Sigma 탐지 룰. Detects the use of the PhoneDeepLink parameter to potentially sideload a DLL file that does not exist. This non-existent DLL file is named "…

작성자: @gott_cyber · 원본 라이선스: DRL 1.1 · SigmaHQ 원본