Beast Ransomware Mutex Detection
The rule detects the creation of specific mutexes associated with the Beast ransomware. It looks for mutex names 'BEAST HERE?'. This activity is indicative of the Beast ransomware executing on a Windows system, likely as part of its encryption or operational phases.
Sigma
