Kraken Ransomware Mutex Detection
The rule detects the creation of specific mutex names associated with Kraken ransomware. It looks for mutexes named 'Microsoft-Kraken-<ComputerName>'. The detection logic is based on the 'process_creation' log source category on Windows systems, specifically monitoring the 'MutexName' field.
Sigma
