Network connection via startup folder executable or script
Identifies the execution of unsigned binary or script from the Startup folder followed by network inbound or outbound connection.
- Plataforma: Windows
- Severidad: High
- Táctica MITRE: Persistencia
- Técnicas MITRE: T1547, T1547.001