All Detections

msaRAT Command Execution via cmd.exe with Specific Flags

avatar
Luís Marques@remotecodeexecution
updated today000

This rule attempts to detect the command flags from the msaRAT.

Sigma