Bluesky Ransomware Mutex Detection
This rule detects the creation of a specific mutex name, 'Global\EA408C6BF0D12F526F821798C3F54C9A', which is known to be associated with Bluesky ransomware activity. The detection is based on monitoring process creation events for the presence of this unique mutex identifier.
Sigma
