Scilc.EXE Execution From Non-Default Path
X__Junior (Nextron Systems)
Detects the execution of the "Scilc.EXE" binary - a native utility that's part of the MicroSCADA software suite from a non-default location. This utility allows for the execution of SCIL commands. Investigate any suspicious files or commands being passed in the command line in order to determine suspicious activity.
Nextron Sigma feed only (private)