Arbitrary File Download Via MSPUB.EXE (3b3c7f55-f771-4dd6-8a6e-08d057a17caf)
Detects usage of "MSPUB" (Microsoft Publisher) to download arbitrary files
| Cluster A | Galaxy A | Cluster B | Galaxy B | Level |
|---|---|---|---|---|
| Arbitrary File Download Via MSPUB.EXE (3b3c7f55-f771-4dd6-8a6e-08d057a17caf) | Sigma-Rules | System Binary Proxy Execution - T1218 (457c7820-d331-465a-915e-42f85500ccc4) | Attack Pattern | 1 |