Ldifde.exe Import with File Flag

SigmaHQ Detections@sigmaHQ

•updated Aug 12, 2024•0•20

Detects the execution of "Ldifde.exe" with the import flag "-i" and a file specified by "-f". This can be abused to import data, potentially from remote HTTP sources, leading to arbitrary file downloads or data injection.