Pwning Windows Event Logging with YARA rules | JUMPSEC LABS

https://labs.jumpsec.com/pwning-windows-event-logging-with-yara-rules/