Potential Persistence Via Microsoft Compatibility Appraiser

심각도 보통 Sigma 탐지 룰. Detects manual execution of the "Microsoft Compatibility Appraiser" task via schtasks. In order to trigger persistence stored in the "\AppCo…

작성자: Sreeman · 원본 라이선스: DRL 1.1 · SigmaHQ 원본