Abyssos single-instance mutex creation (Global\[UUID4]_Admin/_User)
Detects creation of a mutex matching Abyssos's Global\[UUID4]_Admin/_User single-instance naming convention, or the specific known hardcoded mutex GUID.
Microsoft Sentinel (KQL)

Detects creation of a mutex matching Abyssos's Global\[UUID4]_Admin/_User single-instance naming convention, or the specific known hardcoded mutex GUID.

Already have an account?