HelloKitty Ransomware Mutex Detection
This rule detects the creation of specific mutexes associated with HelloKitty ransomware. The detection is triggered when a process creates a mutex named 'HELLOKITTYMutex'. This activity is indicative of HelloKitty ransomware execution or presence on a system.
Sigma

