Whoami Execution
Detects the execution of whoami, which is often used by attackers after exploitation to establish what credentials they are logged in under
YARA-L

Detects the execution of whoami, which is often used by attackers after exploitation to establish what credentials they are logged in under

Already have an account?