All Detections

Developer Utility Used as Proxy for Execution

avatar
Darshan Thummar@Mighty
updated Jun 13, 2026006

Detects trusted developer utilities abused as execution proxies for defense evasion

Microsoft Sentinel (KQL)