Netsh helper DLL abuse (Reg via Sysmon)
Detects scenarios where an attacker abuses the Netsh DLL feature to perform some code execution.
Sigma

Detects scenarios where an attacker abuses the Netsh DLL feature to perform some code execution.

Already have an account?