Robuta

https://detection.fyi/sigmahq/sigma/windows/process_creation/proc_creation_win_odbcconf_uncommon_child_process/ Uncommon Child Process Spawned By Odbcconf.EXE | Detection.FYI Detects an uncommon child process of child process uncommon spawned odbcconf exe https://detection.fyi/sigmahq/sigma/windows/process_creation/proc_creation_win_odbcconf_response_file/ Response File Execution Via Odbcconf.EXE | Detection.FYI Detects execution of response file execution via odbcconf https://attack.mitre.org/techniques/T1218/008/ System Binary Proxy Execution: Odbcconf, Sub-technique T1218.008 - Enterprise | MITRE ATT&CK® system binary proxy execution odbcconf sub technique t1218