Protego RAT Mutex Detection
The rule detects the creation of specific mutexes known to be associated with the Protego Remote Access Trojan (RAT). It specifically looks for a mutex named 'kiuwqyergljkwef'. This activity is indicative of Protego RAT execution or presence on a system.
Sigma
