Suspicious Digital Signature Of AppX Package
Detects the execution of AppX packages that have been signed with a known suspicious or malicious digital certificate. Specifically, this rule targets certificates issued to 'Foresee Consulting Inc.', which has been associated with malicious activity. This detection helps identify potentially unwanted or malicious applications attempting to run on a Windows system by leveraging compromised or misused digital signatures.
Sigma
