RedSun - TieringEngineService.exe Staged in RS-Prefixed Temp Dir

심각도 치명 Sigma 탐지 룰. Detects the creation of a file named TieringEngineService.exe inside a directory whose path contains the RS- prefix characteristic of RedSun…

작성자: Swachchhanda Shrawan Poudel (Nextron Systems), @unresolvedhost · 원본 라이선스: DRL 1.1 · SigmaHQ 원본