Ryuk Ransomware Mutex Detection
This rule detects the creation of specific mutexes known to be associated with Ryuk ransomware activity. The rule specifically looks for a mutex named 'rykmutex'. The presence of this mutex indicates a high probability of Ryuk ransomware execution on the system.
Sigma
