id: f668b689-59c5-41a7-bc0b-22168d3df14e
description: N/A
date: 2025-11-27
author: Swachchhanda Shrawan Poudel (Nextron Systems)
rule_metadata:
    - id: c598cc0c-9e70-4852-b9eb-8921af79f598
      title: Hacktool - EDR-Freeze Execution
regression_tests_info:
    - name: Positive Detection Test
      type: evtx
      provider: Microsoft-Windows-Sysmon
      path: regression_data/rules/windows/process_creation/proc_creation_win_hktl_edr_freeze/c598cc0c-9e70-4852-b9eb-8921af79f598.evtx
