CryptoLuck Ransomware Mutex Detection
This rule detects the creation of specific mutexes associated with CryptoLuck ransomware. The rule specifically looks for a mutex named 'CryptoLuck_Instance'. The presence of this mutex indicates potential CryptoLuck ransomware activity on a Windows system.
Sigma
