Avaddon Ransomware Mutex Detection
This rule detects the creation of processes that utilize specific mutex names associated with Avaddon ransomware. The detection is based on the presence of the mutex '{2A0E9C7B-6BE8-4306-9F73-1057003F605B}' during process creation events. This indicates potential Avaddon ransomware activity on the system.
Sigma
