All Detections

KQL to detect hta (.html) execution

avatar
Rudra Verma@Rudraverma
updated Oct 2, 202560202

This KQL detection will create an incident related to malicious .html execution on device

Microsoft Sentinel (KQL)