Rule Info
Name
Tzutil.EXE Execution
Author
Nasreddine Bencherchali (Nextron Systems), X__Junior (Nextron Systems)
Description
Detects execution of tzutil for time zone information reconnaissance.
Date
2024-01-30 00:00:00
Modified
None
Id
92b8ff0c-0a40-48b9-82e7-2a8f3866e54d
Tags
attack.execution
Type
Nextron Sigma feed only (private)
Rule History
Scan your endpoints, forensic images or collected files with our portable scanner THOR