AsyncRAT Mutex Detection
Detects the creation of specific mutexes known to be associated with AsyncRAT malware. The rule looks for mutex names matching 'AsyncMutex_<uniqueid>', which are characteristic of AsyncRAT activity. This detection helps identify potential AsyncRAT infections on Windows systems by monitoring process creation events for these unique mutex patterns.
Sigma
