Rule Info
Name
ELAM Driver Load Policy Changed
Author
Nasreddine Bencherchali (Nextron Systems)
Description
Detects any change to the setting of the ELAM driver load policy.
Reference
Date
2024-01-24 00:00:00
Modified
None
Id
265a760e-6173-44b6-b082-20ec4f2748fc
Tags
attack.defense_evasion attack.t1564.001
Type
Nextron Sigma feed only (private)
Rule History
Scan your endpoints, forensic images or collected files with our portable scanner THOR