Rare Remote Thread Creation By Uncommon Source Image (02d1d718-dd13-41af-989d-ea85c7fab93f)
Detects uncommon processes creating remote threads.
| Cluster A | Galaxy A | Cluster B | Galaxy B | Level |
|---|---|---|---|---|
| Process Injection - T1055 (43e7dc91-05b2-474c-b9ac-2ed4fe101f4d) | Attack Pattern | Rare Remote Thread Creation By Uncommon Source Image (02d1d718-dd13-41af-989d-ea85c7fab93f) | Sigma-Rules | 1 |