Skip to content

Hide Navigation Hide TOC

Uncommon Child Process Spawned By Odbcconf.EXE (8e3c7994-131e-4ba5-b6ea-804d49113a26)

Detects an uncommon child process of "odbcconf.exe" binary which normally shouldn't have any child processes.

Cluster A Galaxy A Cluster B Galaxy B Level
Odbcconf - T1218.008 (6e3bd510-6b33-41a4-af80-2d80f3ee0071) Attack Pattern Uncommon Child Process Spawned By Odbcconf.EXE (8e3c7994-131e-4ba5-b6ea-804d49113a26) Sigma-Rules 1
Odbcconf - T1218.008 (6e3bd510-6b33-41a4-af80-2d80f3ee0071) Attack Pattern System Binary Proxy Execution - T1218 (457c7820-d331-465a-915e-42f85500ccc4) Attack Pattern 2