BlackStore Ransomware Mutex Detection
The rule detects the creation of specific mutexes known to be associated with BlackStore ransomware. Specifically, it looks for a mutex named 'Global\FSWiper'. The presence of this mutex indicates potential BlackStore ransomware activity on a Windows system.
Sigma
