Inveigh HackTool Execution Artefacts
Detects the presence and execution of the Inveigh hack tool by monitoring for the creation of its characteristic log and executable files. Inveigh is a PowerShell-based tool used for network sniffing, LLMNR/NBNS/mDNS spoofing, and NTLM relay attacks.
Sigma
