Follina for Protocol Handlers

[sorangutan]

The Splunk Threat Research Team shares how to identify protocol handlers on an endpoint, different ways to simulate adversary tradecraft that utilizes a protocol handler, and a piece of inspiring hunting content to help defenders identify protocol handlers being used in their environment.

https://www.splunk.com/en_us/blog/security/follina-for-protocol-handlers.html