Remote Thread Creation By Uncommon Source Image (66d31e5f-52d6-40a4-9615-002d3789a119)
Detects uncommon processes creating remote threads.
Cluster A | Galaxy A | Cluster B | Galaxy B | Level |
---|---|---|---|---|
Remote Thread Creation By Uncommon Source Image (66d31e5f-52d6-40a4-9615-002d3789a119) | Sigma-Rules | Process Injection - T1055 (43e7dc91-05b2-474c-b9ac-2ed4fe101f4d) | Attack Pattern | 1 |