WinGet Silent Configuration Execution
Detects the command-line usage of WinGet invoking a configuration file, specifically targeting switches designed for silent, non-interactive execution. This behavior can be indicative of an adversary attempting to install or configure software without user interaction, potentially for persistence, defense evasion, or to establish command and control.
CQL
