HackTool - Certify Execution — Detection Rule
Detects Certify a tool for Active Directory certificate abuse based on PE metadata characteristics and common command line arguments.
Detects Certify a tool for Active Directory certificate abuse based on PE metadata characteristics and common command line arguments.