Renamed ProcDump Execution

SigmaHQ Detections@sigmaHQ

•updated Jul 1, 2026•0•0•1

Detects the execution of a renamed ProcDump executable. This often done by attackers or malware in order to evade defensive mechanisms.