Inveigh HackTool Execution Detection

SigmaHQ Detections@sigmaHQ

•updated Aug 12, 2024•0•13

Detects the execution of Inveigh, a cross-platform .NET IPv4/IPv6 machine-in-the-middle tool, by looking for its executable name, original file name, description, or specific command-line arguments indicative of its spoofing/sniffing functionality.