Suspicious File Downloaded From File-Sharing Website Via Certutil.EXE
Detects the execution of certutil with certain flags that allow the utility to download files from file-sharing websites.
Sigma

Detects the execution of certutil with certain flags that allow the utility to download files from file-sharing websites.

Already have an account?