Quick Assist Execution

SigmaHQ Detections@sigmaHQ

•updated Jun 13, 2025•1•0•20

Detects the execution of the Microsoft Quick Assist tool, 'QuickAssist.exe'. This utility can be leveraged by attackers to gain remote access to a system, often in social engineering attacks leading to further compromise like ransomware.