id: 5640730a-30d1-4aca-9ad3-dbb9000bb091
description: N/A
date: 2025-10-24
author: SigmaHQ Team
rule_metadata:
    - id: aba15bdd-657f-422a-bab3-ac2d2a0d6f1c
      title: Potentially Suspicious DMP/HDMP File Creation
regression_tests_info:
    - name: Positive Detection Test
      type: evtx
      provider: Microsoft-Windows-Sysmon
      match_count: 1
      path: regression_data/rules/windows/file/file_event/file_event_win_dump_file_susp_creation/aba15bdd-657f-422a-bab3-ac2d2a0d6f1c.evtx
