LetsDefend Monitoring Alert
Suspicious Mshta Behavior
Mar, 05, 2022, 10:29 AM
Event ID: 114
Event Time: Mar, 05, 2022, 10:29 AM
Rule Name: SOC164 - Suspicious Mshta Behavior
Alert Type: LOLBin
MITRE Technique:
T1112 - Defense Evasion - Modify Registry,
Severity: High
Security Analyst