All Detections

AsyncRAT - AHK Interpreter Disguised as Realtek (T1036.003)

avatar
Ibrahim Saud@tektrix
updated Jun 20, 2026006

Identifies untrusted AutoHotkey (AHK) scripts executing under renamed benign system signatures, specifically masquerading as Realtek components.

Microsoft Sentinel (KQL)