Lace Tempest File Indicators

심각도 높음 Sigma 탐지 룰. Detects PowerShell script file creation with specific names or suffixes which was seen being used often in PowerShell scripts by FIN7

작성자: Nasreddine Bencherchali (Nextron Systems) · 원본 라이선스: DRL 1.1 · SigmaHQ 원본