Potential Defense Evasion via Emoji and Unicode Characters in Command Line
Detects the usage of emojis and various Unicode characters in command-line arguments. This technique can be used by adversaries for defense evasion, specifically to obfuscate commands and avoid detection by signature-based security tools. The rule identifies a wide range of such characters, including colored squares, arrows, playing card symbols, clock faces, chess pieces, dice, hieroglyphs, flags, and modern emojis.
Sigma
