Closed JakePeralta7 closed 1 year ago
Two simple signatures that detects disabling the Sysmon service and setting his startup type to manually
Ah nice, I think this is our first Chainsaw rule PR 🎉 Anyways, LGTM, in it goes!
Two simple signatures that detects disabling the Sysmon service and setting his startup type to manually