Renamed Scilc.EXE Execution
Nasreddine Bencherchali (Nextron Systems)
Detects the execution of a renamed "Scilc.EXE" binary - a native utility that's part of the MicroSCADA software suite. This utility allows for the execution of SCIL commands. Investigate any suspicious files or commands being passed in the command line in order to determine suspicious activity.
Nextron Sigma feed only (private)