01
detectionlint / library / sigma

PUA - Mouse Lock Execution

sigmaDRL-1.1from SigmaHQ/sigma

In Kaspersky's 2020 Incident Response Analyst Report they listed legitimate tool "Mouse Lock" as being used for both credential access and collection in security incidents.

02
quality100
fp risk—
forks0
views0

ATT&CK techniques

rule sourcelocked

Sign in to view the rule source

Free accounts can view the source for the top-ranked rules. Create one in seconds — no credit card required.

Sign in