Karma Ransomware Mutex Detection

The rule detects the creation of specific mutex names associated with Karma ransomware activity. It specifically looks for a mutex named 'KARMA'. This detection is based on the presence of these mutexes, which are known indicators of Karma ransomware execution.

Sigma