Installation of WSL Kali-Linux

SigmaHQ Detections@sigmaHQ

•updated Oct 23, 2025•4•0•53

Detects the installation of the Kali Linux distribution through Windows Subsystem for Linux (WSL). Attackers may use Kali Linux WSL to leverage its penetration testing tools and capabilities for malicious purposes.