RUDEBIRD Backdoor Mutex Detection
The rule detects the creation of a process that utilizes specific mutex names ('VV.0') known to be associated with the RUDEBIRD backdoor. This indicates potential RUDEBIRD backdoor activity on the system.
Sigma
The rule detects the creation of a process that utilizes specific mutex names ('VV.0') known to be associated with the RUDEBIRD backdoor. This indicates potential RUDEBIRD backdoor activity on the system.
Already have an account?