Suspicious SysAidServer Child

SigmaHQ Detections@sigmaHQ

•updated Aug 12, 2024•0•0•0

Detects suspicious child processes of SysAidServer (as seen in MERCURY threat actor intrusions)