Risen Ransomware Mutex Detection
This rule detects the creation of specific mutexes associated with Risen ransomware. It looks for the mutex name 'risen_mutex' during process creation events on Windows systems. The presence of these mutexes indicates potential Risen ransomware activity, which typically involves encrypting files and demanding a ransom.
Sigma
