Failed Code Integrity Checks
Detects code integrity failures such as missing page hashes or corrupted drivers due to unauthorized modification. This could be a sign of tampered binaries, which adversaries might use for defense evasion or to maintain persistence.
Sigma
