Suspicious Image and Executable File Correlation Detection
This query is a security detection rule: it flags when image file operations occur in tandem with executable file operations, which is often a sign of potential malware or intrusion activity.
Microsoft Sentinel (KQL)
