Ryan Chapman
@KnightArtorias420 followers0 downloads4 copies0 likes60 views
1 detection
Filters
Last updated
All Time
Detection languages
1
Categories
1
1
Platforms
1
Products / Services
1
MITRE Techniques
1
1
Detects the execution of QEMU where a .dll file is specified as a hard disk image. This is a known TTP associated with the "Bring Your Own Hypervisor" (BYOH) technique, where attackers hide malicious activity within a virtualized environment using non-standard disk image formats.
