Søren Holm Pedersen

@SorenHP

0 followers4 downloads15 copies2 likes447 views

1 detection

Filters

Last updated

All Time

Detection languages

Microsoft Sentinel (KQL)1

Platforms

Windows1

MITRE Techniques

T1543.003 - Windows Service1

T1547 - Boot or Logon Autostart Execution1

T1574.001 - DLL1

Akira Sonicwall byovd weaponization (rwdrv.sys and hlpdrv.sys)

KQL

This is a KQL detection based on the YARA rules by Jason Baker of GuidePoint Security in linked reference - Connected to the Akira ransomware exploits

Søren Holm Pedersen@SorenHP

Detections.ai Community

6 months ago

152447