Replace.exe Usage (9292293b-8496-4715-9db6-37028dcda4b3)
Detects the use of Replace.exe which can be used to replace file with another file
| Cluster A | Galaxy A | Cluster B | Galaxy B | Level |
|---|---|---|---|---|
| Replace.exe Usage (9292293b-8496-4715-9db6-37028dcda4b3) | Sigma-Rules | Ingress Tool Transfer - T1105 (e6919abc-99f9-4c6c-95a5-14761e7b2add) | Attack Pattern | 1 |