mirror of
https://github.com/LOLBAS-Project/LOLBAS
synced 2025-01-30 15:23:07 +01:00
Update Remote.yml with Sigma (#227)
* Update Remote.yml * Update acknowledgement Co-authored-by: bohops <jimmy@jbtech.us>
This commit is contained in:
parent
ec676cbd93
commit
c19a2e3cf8
@ -32,6 +32,7 @@ Code_Sample:
|
|||||||
- Code:
|
- Code:
|
||||||
Detection:
|
Detection:
|
||||||
- IOC: remote.exe process spawns
|
- IOC: remote.exe process spawns
|
||||||
|
- Sigma: https://github.com/SigmaHQ/sigma/blob/master/rules/windows/process_creation/proc_creation_win_lolbin_remote.yml
|
||||||
Resources:
|
Resources:
|
||||||
- Link: https://blog.thecybersecuritytutor.com/Exeuction-AWL-Bypass-Remote-exe-LOLBin/
|
- Link: https://blog.thecybersecuritytutor.com/Exeuction-AWL-Bypass-Remote-exe-LOLBin/
|
||||||
Acknowledgement:
|
Acknowledgement:
|
||||||
|
Loading…
Reference in New Issue
Block a user