Network Connection Initiated Via Notepad.EXE
심각도 높음 Sigma 탐지 룰. Detects a network connection that is initiated by the "notepad.exe" process. This might be a sign of process injection from a beacon process…
작성자: EagleEye Team · 원본 라이선스: DRL 1.1 · SigmaHQ 원본