Phantom Mantis G12/G13 Killer Tool Diagnostic Strings
Detects embedded diagnostic banner and debug strings from Phantom Mantis G12/G13 EDR killer tools, requiring a unique tool banner alongside a debug string to reduce false positives.
YARA

Detects embedded diagnostic banner and debug strings from Phantom Mantis G12/G13 EDR killer tools, requiring a unique tool banner alongside a debug string to reduce false positives.

Already have an account?