Hermes Ransomware Mutex Detection

The rule detects the creation of specific mutexes ('tech') that are known to be associated with Hermes ransomware activity. This detection is based on monitoring process creation events for these mutex names.

Sigma