Use of W32tm as Timer (6da2c9f5-7c53-401b-aacb-92c040ce1215)
When configured with suitable command line arguments, w32tm can act as a delay mechanism
| Cluster A | Galaxy A | Cluster B | Galaxy B | Level |
|---|---|---|---|---|
| System Time Discovery - T1124 (f3c544dc-673c-4ef3-accb-53229f1ae077) | Attack Pattern | Use of W32tm as Timer (6da2c9f5-7c53-401b-aacb-92c040ce1215) | Sigma-Rules | 1 |