
Rule Info
Name
Pcalua Uncommon Child Process
Author
X__Junior
Description
Detects an uncommon child process of pcalua.exe that may indicate malicious activity.
Date
2025-01-08 00:00:00
Modified
None
Id
86fdecfd-619e-41e7-8272-41698da1ce21
Tags
attack.execution attack.t1204
Type
Nextron Sigma feed only (private)