Potential GobRAT File Discovery Via Grep (e34cfa0c-0a50-4210-9cb3-5632d08eb041)
Detects the use of grep to discover specific files created by the GobRAT malware
| Cluster A | Galaxy A | Cluster B | Galaxy B | Level |
|---|---|---|---|---|
| System Information Discovery - T1082 (354a7f88-63fb-41b5-a801-ce3b377b36f1) | Attack Pattern | Potential GobRAT File Discovery Via Grep (e34cfa0c-0a50-4210-9cb3-5632d08eb041) | Sigma-Rules | 1 |