Msiexec Remote Supabase Download
Detects the execution of msiexec.exe to download and install a remote MSI payload from Supabase cloud storage. This technique is known to be used by the Warlock ransomware group to silently deploy the Velociraptor C&C framework while evading network detections.
Sigma
