File Explorer Opening My Computer Via Shell Command

SigmaHQ Detections@sigmaHQ

•updated Jul 1, 2025•0•21

Detects the execution of 'explorer.exe' to open the 'My Computer' folder, initiated by command-line interpreters like 'cmd.exe' or PowerShell. This behavior can be used by adversaries for discovery purposes, specifically to enumerate local drives and resources.