
(SIGMA) SIGMA_kill_process
Created the . Updated 1 year, 3 months ago.
title: Kill multiple process
status: experimental
description: Kill multiple process
author: Joe Security
date: 2019-12-30
id: 200039
threatname:
behaviorgroup: 18
classification: 8
mitreattack:
logsource:
category: process_creation
product: windows
detection:
selection:
CommandLine:
- '*cmd*taskkill /f*& taskkill /f*& taskkill /f*& taskkill /f*& taskkill /f*& taskkill /f*& taskkill /f*'
condition: selection
level: critical
Associated Techniques
Technique Name | Technique ID's | Has Snippet(s) |
---|---|---|
Kill Process | U0403 |