Potential Command-Line Obfuscation Using Unicode Characters

SigmaHQ Detections@sigmaHQ

•updated Sep 6, 2024•0•28

Detects potential command-line obfuscation using Unicode characters. Adversaries may use these characters to evade detection by security tools that do not properly normalize or interpret them, making the command-line arguments difficult to analyze or signature.