Rule Info
Name
Current Time Zone Changed Via Tzutil.EXE
Author
Nasreddine Bencherchali (Nextron Systems)
Description
Detects execution of tzutil in order to change the time zone configuration.
Date
2024-01-30 00:00:00
Modified
None
Id
1b962230-f39b-41d2-9cda-f5e10c176349
Tags
attack.execution
Type
Nextron Sigma feed only (private)
Rule History
Scan your endpoints, forensic images or collected files with our portable scanner THOR