PUA - Rclone Execution

심각도 높음 Sigma 탐지 룰. Detects execution of RClone utility for exfiltration as used by various ransomwares strains like REvil, Conti, FiveHands, etc

작성자: Bhabesh Raj, Sittikorn S, Aaron Greetham (@beardofbinary) - NCC Group · 원본 라이선스: DRL 1.1 · SigmaHQ 원본