Created Files by Microsoft Sync Center (409f8a98-4496-4aaa-818a-c931c0a8b832)

This rule detects suspicious files created by Microsoft Sync Center (mobsync)

Cluster A	Galaxy A	Cluster B	Galaxy B	Level
Process Injection - T1055 (43e7dc91-05b2-474c-b9ac-2ed4fe101f4d)	Attack Pattern	Created Files by Microsoft Sync Center (409f8a98-4496-4aaa-818a-c931c0a8b832)	Sigma-Rules	1
System Binary Proxy Execution - T1218 (457c7820-d331-465a-915e-42f85500ccc4)	Attack Pattern	Created Files by Microsoft Sync Center (409f8a98-4496-4aaa-818a-c931c0a8b832)	Sigma-Rules	1