Potential Defense Evasion via Emoji Usage in Command Line
This rule detects the use of various emojis within command-line arguments. Adversaries may use uncommon characters, such as emojis, in command lines to evade signature-based detections, obfuscate their activities, or bypass security controls that are not designed to parse or analyze such characters. This technique falls under defense evasion, as it attempts to make malicious commands less conspicuous to automated analysis.
Sigma
