Process Launched Without Image Name
Detect the use of processes with no name (".exe"), which can be used to evade Image-based detections.
Sigma

Detect the use of processes with no name (".exe"), which can be used to evade Image-based detections.

Already have an account?