highstableEmerging Threat
Trickbot Malware Activity
Detects Trickbot malware process tree pattern in which "rundll32.exe" is a parent of "wermgr.exe"
windowsprocess_creation
2021-11-27
Trickbot is tracked here as a malware family or toolset with 1 Sigma detection spanning 2020. Coverage centers on windows / process_creation.
Detects Trickbot malware process tree pattern in which "rundll32.exe" is a parent of "wermgr.exe"