Mutex Creation Associated with LabubaRAT Fake NVIDIA Container Monitor
Detects the execution of an executable named 'nvidia-sysruntime.exe', which is used by the LabubaRAT malware family to masquerade as a legitimate NVIDIA component to maintain persistence and evade detection.
Microsoft Sentinel (KQL)
