Suspicious Self-Deletion of Executable or Script
Detects a process that deletes its own executable or script file within a short time window after launch, which is a technique used by some implants.
Sigma

Detects a process that deletes its own executable or script file within a short time window after launch, which is a technique used by some implants.

Already have an account?