Suspicious AppX Package Installation Attempt (Unsigned)
Detects an attempt to install an AppX package that fails due to a signing requirement error (0x80073cff). This error indicates that the package is not properly signed, which can be a characteristic of suspicious or malicious applications attempting to bypass security measures.
Sigma

