Potentially Suspicious Child Process Of WinRAR.EXE (146aace8-9bd6-42ba-be7a-0070d8027b76)
Detects potentially suspicious child processes of WinRAR.exe.
| Cluster A | Galaxy A | Cluster B | Galaxy B | Level |
|---|---|---|---|---|
| Potentially Suspicious Child Process Of WinRAR.EXE (146aace8-9bd6-42ba-be7a-0070d8027b76) | Sigma-Rules | Exploitation for Client Execution - T1203 (be2dcee9-a7a7-4e38-afd6-21b31ecc3d63) | Attack Pattern | 1 |