Scilc.EXE Execution From Non-Default Path

X__Junior (Nextron Systems)

Detects the execution of the "Scilc.EXE" binary - a native utility that's part of the MicroSCADA software suite from a non-default location. This utility allows for the execution of SCIL commands. Investigate any suspicious files or commands being passed in the command line in order to determine suspicious activity.

2024-01-30 00:00:00

None

3eb2ae7e-a65b-4b69-b143-1fb69a479d11

attack.reconnaissance attack.t1595

Nextron Sigma feed only (private)