All Detections

Virtual Machine Run to Hide Activity

avatar
Darshan Thummar@Mighty
updated Jun 27, 2026002

Detects spinning up of virtual machines to conduct malicious activity in isolation

Microsoft Sentinel (KQL)