This is a lame, cute, not-only-sysmon evasion that is not really an evasion, but more a social engineering trick – still, it may fool some junior analysts… As I mentioned […]
Article Link: http://www.hexacorn.com/blog/2018/07/21/sysmon-doing-lines-part-5/