AsyncRAT - SoundDiagnostics Masqueraded Staging (T1036.005)
Detects executable or script files dropped in the deceptive Windows sound diagnostics package folder, representing decoded payload bytes.
Microsoft Sentinel (KQL)

Detects executable or script files dropped in the deceptive Windows sound diagnostics package folder, representing decoded payload bytes.

Already have an account?