MedusaLocker Ransomware Mutex Detection
This rule detects the creation of specific mutexes known to be associated with MedusaLocker ransomware. The detection is based on the presence of the mutex name '8761ABBD-7F85-42EE-B272-A76179687C63'. The rule is designed to identify MedusaLocker activity by monitoring for these unique mutex identifiers.
Sigma
