MITRE CAR unknown stable sigma

Service Outlier Executables

New executables that are started as a service are suspicious. This analytic looks for anomalous service executables.

View Source

Detection Logic

New executables that are started as a service are suspicious. This analytic looks for anomalous service executables.

Field Validations

Loading…

Comments (0)

Loading comments...