01
detectionlint / library / sigma
Suspicious Double Extension Files
Detects dropped files with double extensions, which is often used by malware as a method to abuse the fact that Windows hide default extensions by default.
Detects dropped files with double extensions, which is often used by malware as a method to abuse the fact that Windows hide default extensions by default.