Remote Thread Creation Ttdinject.exe Proxy (c15e99a3-c474-48ab-b9a7-84549a7a9d16)
Detects a remote thread creation of Ttdinject.exe used as proxy
| Cluster A | Galaxy A | Cluster B | Galaxy B | Level |
|---|---|---|---|---|
| Remote Thread Creation Ttdinject.exe Proxy (c15e99a3-c474-48ab-b9a7-84549a7a9d16) | Sigma-Rules | Trusted Developer Utilities Proxy Execution - T1127 (ff25900d-76d5-449b-a351-8824e62fc81b) | Attack Pattern | 1 |