id: da6fdf7c-8cea-4daf-be02-38c22f8cf494
description: N/A
date: 2026-04-17
author: Swachchhanda Shrawan Poudel (Nextron Systems)
rule_metadata:
    - id: a7c3e5f2-8b1d-4e9a-b6c2-3d7f5e8a9b4c
      title: RedSun - TieringEngineService.exe Detected as EICAR Test File
regression_tests_info:
    - name: Positive Detection Test
      type: evtx
      provider: Microsoft-Windows-Sysmon
      match_count: 1
      path: regression_data/rules-emerging-threats/2026/Exploits/RedSun/win_defender_exploit_redsun_tiering_engine_detected_as_eicar/a7c3e5f2-8b1d-4e9a-b6c2-3d7f5e8a9b4c.evtx
