Behavioral LOLBins detection engine with sequential correlation, PE masquerading checks, and Sysmon integration
I built a behavioral detection engine focused on Living-off-the-Land binaries on Windows and wanted to share it with the community
Read More