CodePage Modification Via MODE.COM — Detection Rule

Detects a CodePage modification using the "mode.com" utility. This behavior has been used by threat actors behind Dharma ransomware.

Read the full analysis on IntelFusions