Suspicious Files in Default GPO Folder
Detects the creation of copy of suspicious files (EXE/DLL) to the default GPO storage folder
Sigma

Detects the creation of copy of suspicious files (EXE/DLL) to the default GPO storage folder

Already have an account?