New TimeProviders Registered With Uncommon DLL Name

심각도 높음 Sigma 탐지 룰. Detects processes setting a new DLL in DllName in under HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\W32Time\TimeProvider. Adversari…

작성자: frack113 · 원본 라이선스: DRL 1.1 · SigmaHQ 원본