Cylance Ransomware Mutex Detection

This rule detects the creation of specific mutexes associated with Cylance ransomware activity. The detection is triggered when a process creates a mutex named 'CylanceMutex'. This indicates potential ransomware execution or preparation on a Windows system.

Sigma