UAT-8837 Tooling Hash Values

Detects files associated with various tools (GoTokenTheft, Earthworm, SharpHound, Impacket, GoExec, SharpWMI, Rubeus, Certipy) used by the UAT-8837 threat actor based on their SHA256 hashes.

Sigma