Phoenix
Sigma IntelligenceBeta
Rule Library

Sigma Rules

1 rule found for "Omkar Gudhate"

3,707Total
3,116Detection
451Emerging
137Hunting
Detectionhightest

COM Hijack via Sdclt

Detects changes to 'HKCU\Software\Classes\Folder\shell\open\command\DelegateExecute'

WindowsRegistry Set
TA0003 · PersistenceTA0005 · Defense EvasionTA0004 · Privilege EscalationT1546 · Event Triggered Execution+1
Omkar GudhateSun Sep 27windows