HackTool - Certify Execution — Detection Rule

Detects Certify a tool for Active Directory certificate abuse based on PE metadata characteristics and common command line arguments.

Read the full analysis on IntelFusions