Suspicious IIS Module Registration
Detects a suspicious IIS module registration as described in Microsoft threat report on IIS backdoors
Sigma

Detects a suspicious IIS module registration as described in Microsoft threat report on IIS backdoors

Already have an account?