Executable Masquerading as Windows System Binary
Detects executables using Windows system binary names from non-system paths
Microsoft Sentinel (KQL)

Detects executables using Windows system binary names from non-system paths

Already have an account?