LoFP
/
t1218.002
t1218.002
Title
Tags
limited false positives will be present as control.exe does not natively load from writable paths as defined. one may add .cpl or .inf to the command-line if there is any false positives. tune as needed.
t1218
t1218.002
endpoint
splunk
LoFP
/
t1218.002