All Detections

Copy .DMP/.DUMP Files From Remote Share Via Cmd.EXE

avatar
SigmaHQ Detections@sigmaHQ
updated Aug 12, 2024001

Detects usage of the copy builtin cmd command to copy files with the ".dmp"/".dump" extension from a remote share

Sigma