LabubaRAT nvidia-sysruntime.exe Process Execution for Host Reconnaissance
Detects the execution of nvidia-sysruntime.exe, a process name used by LabubaRAT for host reconnaissance. The detection relies on identifying this specific filename, which in the context of the malware is often unsigned or associated with malicious activity as opposed to legitimate NVIDIA Container Toolkit components.
Microsoft Sentinel (KQL)
