RomulusLoader File Persistence
Detects RomulusLoader persistence behavior where Vulkan components (such as vulkan-1.dll or .bin files) are written to the Common Files directory. This activity is associated with TA4922 and their use of RomulusLoader for initial access and staging.
Sigma
