Forfiles.EXE Child Process Masquerading

심각도 높음 Sigma 탐지 룰. Detects the execution of "forfiles" from a non-default location, in order to potentially spawn a custom "cmd.exe" from the current working d…

작성자: Nasreddine Bencherchali (Nextron Systems), Anish Bogati · 원본 라이선스: DRL 1.1 · SigmaHQ 원본