Surtr Ransomware Mutex Detection

The rule detects the creation of specific mutexes associated with Surtr ransomware. It looks for a mutex named 'SurtrMUTEX'. The detection is based on process creation events on Windows systems.

Sigma