Potential defense evasion via binary rename

Intel Name: Potential defense evasion via binary rename

Date of Scan: July 18, 2025

Impact: Medium

Summary:
Detects the execution of a renamed binary commonly used by attackers or malware, using the new Sysmon OriginalFileName data point for identification.

More Details