SFTP.exe LOLBIN Usage with -D Flag
Detects the usage of the "sftp.exe" binary as a Living Off The Land Binary (LOLBIN) by abusing the "-D" flag to potentially execute arbitrary commands or binaries. This technique can be used for defense evasion or execution.
Sigma
