Atlas RAT Sandbox Evasion via WDAG Registry Check
Detects Atlas RAT performing anti-analysis and sandbox evasion checks by querying the Windows Defender Application Guard (WDAG) RunOnce registry key. This behavior is associated with TA4922.
Sigma
Detects Atlas RAT performing anti-analysis and sandbox evasion checks by querying the Windows Defender Application Guard (WDAG) RunOnce registry key. This behavior is associated with TA4922.
Already have an account?