Crassus Privilege Escalation Discovery Tool Execution

SigmaHQ Detections@sigmaHQ

•updated Jun 4, 2025•1•0•16

Detects Crassus, a Windows privilege escalation discovery tool, based on PE metadata characteristics such as image name, original file name, or description containing 'Crassus'. This tool is used for reconnaissance and discovery activities on a compromised system.