HackTool - Sliver C2 Implant Activity Pattern
Detects process activity patterns indicative of the Sliver C2 framework implants. Specifically, it looks for command-line arguments used by Sliver to execute PowerShell with specific encoding settings.
Sigma
