Crypt0r Ransomware Mutex Detection
This rule detects the creation of specific mutexes known to be associated with Crypt0r ransomware. The detection is based on the presence of the mutex name 'crypt0r-mutex'. The rule leverages process creation logs to identify these mutexes, indicating potential Crypt0r ransomware activity on a Windows system.
Sigma
