Dragonfly | Detection.FYI

Ps.exe Renamed SysInternals Tool

Apr 28, 2026 · attack.stealth attack.g0035 attack.t1036.003 car.2013-05-009 detection.emerging-threats ·
Share on:

Detects renamed SysInternals tool execution with a binary named ps.exe as used by Dragonfly APT group and documented in TA17-293A report

Read More