Indrik Ransomware Mutex Detection
This rule detects the creation of specific mutexes known to be associated with Indrik ransomware activity. The detection specifically looks for a mutex named 'Global\Indrik'. The presence of this mutex indicates potential Indrik ransomware infection or execution on a Windows system.
Sigma

