PegasusRAT Mutex Detection
The rule detects the creation of a process that utilizes a mutex named 'PEGASUS'. This specific mutex name is associated with PegasusRAT, a type of Remote Access Trojan (RAT). The detection logic is based on the presence of this mutex name, indicating potential PegasusRAT activity on a Windows system.
Sigma
