RevengeRAT Mutex Detection
The rule detects the creation of specific mutex names associated with RevengeRAT malware. It looks for mutexes named 'RV_MUTEX-<random>', which are known indicators of RevengeRAT activity. This detection focuses on the process creation logs within Windows environments to identify these mutexes.
Sigma
