Suspicious Redirection to Local Admin Share

SigmaHQ Detections@sigmaHQ

•updated Dec 28, 2023•0•0•0

Detects a suspicious output redirection to the local admins share, this technique is often found in malicious scripts or hacktool stagers