RevClient RAT Mutex Detection
The rule detects the creation of specific mutexes associated with the RevClient Remote Access Trojan (RAT). It specifically looks for a mutex named 'ZhengReversePC'. The presence of this mutex indicates potential RevClient RAT activity on a Windows system.
Sigma
