Satan Ransomware Mutex Detection
The rule detects the creation of specific mutexes associated with Satan ransomware activity. It looks for mutex names 'SSSS_Scan' or 'SATAN_CRYPT'. The detection is based on process creation events on Windows systems.
Sigma

