Rule Info
Name
Dev Drive Enabled
Author
Nasreddine Bencherchali (Nextron Systems)
Description
Detects activity that indicates enabling the "Dev Drive" feature.
Reference
Date
2024-01-24 00:00:00
Modified
None
Id
403c306e-824d-4b02-a911-32e4633b96e8
Tags
attack.execution attack.defense_evasion
Type
Nextron Sigma feed only (private)
Rule History
Scan your endpoints, forensic images or collected files with our portable scanner THOR