Sdiagnhost Calling Suspicious Child Process

심각도 높음 Sigma 탐지 룰. Detects sdiagnhost.exe calling a suspicious child process (e.g. used in exploits for Follina / CVE-2022-30190)

관련 CVE: CVE-2022-30190

작성자: Nextron Systems, @Kostastsale · 원본 라이선스: DRL 1.1 · SigmaHQ 원본