mirror of
https://github.com/LOLBAS-Project/LOLBAS
synced 2025-03-01 13:23:35 +01:00
parent
619aafbfa2
commit
666e6e8645
@ -23,6 +23,8 @@ Full_Path:
|
||||
- Path: C:\Windows\SysWOW64\desk.cpl
|
||||
Detection:
|
||||
- IOC:
|
||||
- Sigma: https://github.com/SigmaHQ/sigma/blob/master/rules/windows/file_event/file_event_win_new_src_file.yml
|
||||
- Sigma: https://github.com/SigmaHQ/sigma/blob/master/rules/windows/process_creation/proc_creation_win_rundll32_installscreensaver.yml
|
||||
Resources:
|
||||
- Link: https://vxug.fakedoma.in/zines/29a/29a7/Articles/29A-7.030.txt
|
||||
- Link: https://twitter.com/pabraeken/status/998627081360695297
|
||||
@ -34,4 +36,6 @@ Acknowledgement:
|
||||
Handle: '@pabraeken'
|
||||
- Person: hai
|
||||
Handle: '@VakninHai'
|
||||
Person: Christopher Peacock
|
||||
Handle: '@SecurePeacock'
|
||||
---
|
||||
|
Loading…
Reference in New Issue
Block a user