Potential Anti-Malware Analysis Tool Execution - Process and Memory Analysis
Detects the execution of common process and memory analysis tools. The presence of these tools on a standard user endpoint could indicate reconnaissance, reverse engineering, or an attempt by malware to check for an analysis environment. This list is based on tools blacklisted by the Stealit malware.
Sigma
