VSSAudit Security Event Source Registration

SigmaHQ Detections@sigmaHQ

•updated Aug 12, 2024•0•0•0

Detects the registration of the security event source VSSAudit. It would usually trigger when volume shadow copy operations happen.