Pandora Ransomware Mutex Detection
This rule detects the creation of specific mutexes ('ThisisMutexa' or 'FFFFFMutex') that are known to be associated with Pandora ransomware activity. The detection is based on monitoring process creation events for these mutex names.
Sigma

