PUA - Kernel Driver Utility (KDU) Execution

심각도 높음 Sigma 탐지 룰. Detects execution of the Kernel Driver Utility (KDU) tool. KDU can be used to bypass driver signature enforcement and load unsigned or malic…

작성자: Matt Anderson, Dray Agha, Anna Pham (Huntress) · 원본 라이선스: DRL 1.1 · SigmaHQ 원본