GMER Rootkit Detector and Remover Execution

SigmaHQ Detections@sigmaHQ

•updated Nov 25, 2024•0•13

Detects the execution of the GMER tool, a rootkit detector and remover, based on its executable name and known file hashes. This tool can be used by adversaries to impair defenses by identifying and disabling security software or hidden processes.