Dharma Ransomware Mutex Detection
The rule detects the creation of specific mutexes known to be associated with Dharma ransomware activity. It specifically looks for a mutex named 'Global\syncronize_<uniqueid>', where '<uniqueid>' likely represents a variable or dynamically generated string.
Sigma

