Rook Ransomware Mutex Detection
Detects known mutexes associated with Rook ransomware activity. The rule specifically looks for the mutex name 'asfgjkl878645165456fa888' during process creation events on Windows systems.
Sigma
Detects known mutexes associated with Rook ransomware activity. The rule specifically looks for the mutex name 'asfgjkl878645165456fa888' during process creation events on Windows systems.
Already have an account?