sigma
sigma copied to clipboard
Create file_event_win_malware_darkgate_autoit3_save_temp.yml
Summary of the Pull Request
Creating new rule to detect new variant of DarkGate loader then it is writing files into C:\temp folder.
Changelog
new: DarkGate - Save DarkGate Loader in Temp
Example Log Event
Fixed Issues
SigmaHQ Rule Creation Conventions
- If your PR adds new rules, please consider following and applying these conventions