d0glun Ransomware Mutex Detection
The rule detects the creation of a specific mutex named 'dawdhahdaw'. This mutex name is associated with d0glun ransomware activity. The detection is based on monitoring process creation events on Windows systems.
Sigma
