Suspicious PDF Execution via Edge and Command Shell
Detects the execution of Microsoft Edge via the command shell to open a PDF file. This pattern can be indicative of malicious activity where an attacker attempts to bypass direct execution or leverage a browser vulnerability to open a malicious PDF.
Microsoft Sentinel (KQL)
