NodeSnake RAT Mutex Detection
This rule detects the creation of specific mutexes known to be associated with the NodeSnake Remote Access Trojan (RAT). The detection is triggered when a process creates a mutex named 'Global\NodeSnakeMutex'. This activity is indicative of NodeSnake RAT execution or presence on a system.
Sigma
