Suspicious Userinit Child Process (b655a06a-31c0-477a-95c2-3726b83d649d)
Detects a suspicious child process of userinit
| Cluster A | Galaxy A | Cluster B | Galaxy B | Level |
|---|---|---|---|---|
| Process Injection - T1055 (43e7dc91-05b2-474c-b9ac-2ed4fe101f4d) | Attack Pattern | Suspicious Userinit Child Process (b655a06a-31c0-477a-95c2-3726b83d649d) | Sigma-Rules | 1 |