Suspicious Edge Headless PDF Generation
Detects Microsoft Edge being utilized in headless mode to generate PDF files in the Public directory, a technique the Horabot spreader uses to create malicious attachments for phishing.
Splunk (SPL)
Detects Microsoft Edge being utilized in headless mode to generate PDF files in the Public directory, a technique the Horabot spreader uses to create malicious attachments for phishing.
Already have an account?