Uncommon Process Access Rights For Target Image
Detects process access request to uncommon target images with a "PROCESS_ALL_ACCESS" access mask.
Sigma

Detects process access request to uncommon target images with a "PROCESS_ALL_ACCESS" access mask.

Already have an account?