Kimsuky Certutil Lolbin Abuse
Detects the use of certutil.exe for encoding or decoding temporary or cabinet files, a technique used by Kimsuky to obfuscate and stage data for exfiltration.
YARA-L
Detects the use of certutil.exe for encoding or decoding temporary or cabinet files, a technique used by Kimsuky to obfuscate and stage data for exfiltration.
Already have an account?