ChiChi Ransomware Mutex Detection
This rule detects the creation of specific mutexes associated with the ChiChi ransomware. The detection is based on the presence of the mutex name 'chichigotmanagedyou'. The rule leverages process creation logs from Windows systems to identify these mutexes, indicating potential ChiChi ransomware activity. False positives are considered unlikely due to the unique nature of the mutex name.
Sigma
