LimeRAT
LimeRAT
Sigma rule (View on GitHub)
1title: LimeRAT
2status: experimental
3description: LimeRAT
4author: Joe Security
5date: 2021-07-22
6id: 200102
7threatname: LimeRAT
8behaviorgroup: 14,20,21,22
9classification: 4
10mitreattack:
11
12logsource:
13 category: process_creation
14 product: windows
15detection:
16 selection:
17 CommandLine:
18 - '*schtasks*limerat*'
19 condition: selection
20level: critical