All Detections

Process Arguments Spoofed to Hide True Command

avatar
Darshan Thummar@Mighty
updated Jun 13, 2026004

Detects process argument spoofing techniques to hide true command line from forensics

Microsoft Sentinel (KQL)