Noblis Ransomware Mutex Detection

The rule detects the creation of specific mutexes associated with Noblis ransomware activity. It looks for a mutex named 'mutex_rr_windows'.

Sigma