Cerber Ransomware Mutex Detection

Detects known mutexes associated with Cerber ransomware activity. The rule specifically looks for mutex names matching 'SHELL.{<uuid>}'.

Sigma