ZCryptor Ransomware Mutex Detection
The rule detects the creation of specific mutexes associated with ZCryptor ransomware activity. It specifically looks for a mutex named 'zcrypt1.0'. The detection is based on process creation logs from Windows systems.
Sigma
