HackTool - Certify Execution

SigmaHQ Detections@sigmaHQ

•updated Aug 12, 2024•0•0•1

Detects Certify a tool for Active Directory certificate abuse based on PE metadata characteristics and common command line arguments.