Potential BOINC Software Execution (UC-Berkeley Signature)
This rule detects the execution of software whose metadata includes the description 'University of California, Berkeley'. This string is commonly associated with the BOINC (Berkeley Open Infrastructure for Network Computing) software. While BOINC is legitimate software used for volunteer computing, its unauthorized installation or use could indicate malicious activity, such as an adversary attempting to leverage system resources for their own purposes or as part of a larger compromise.
Sigma
