Rule Info
Name
Tasklist AV Software
Author
X__Junior (Nextron Systems)
Description
Detects tasklist usage to detect security software presence
Reference
Date
2024-09-10 00:00:00
Modified
None
Id
7a46d81a-f3b8-4d4e-a26e-b587856807b9
Tags
attack.credential-access attack.t1003.001
Type
Nextron Sigma feed only (private)
Rule History
Scan your endpoints, forensic images or collected files with our portable scanner THOR