Rules
Detects attempts to spread malware through automatic execution when a USB device is connected, based on AhnLab EPP V3 malware alert logs.
Detects the Import of Mimikatz Files in AhnLab EPP V3 Malware Alert Logs
Detects attempts to execute PowerShell or VBA scripts in AhnLab EPP V3 malware alert logs.
Detects attempts to execute PsExec in AhnLab EPP V3 malware alert logs.
Detects ransomware files in AhnLab EPP V3 malware alert logs.
Detects web shell files in AhnLab EPP V3 malware alert logs.