WinGet DSC config.db History Access - DSC Execution Artefact

Ibrahim Saud@tektrix

•updated Jun 30, 2026•0•0•5

Detects file creation, modification, or renaming events affecting the 'config.db' file within the Microsoft Desktop App Installer package directory. This file is used by the AppInstaller process and unauthorized modification may indicate attempts to tamper with installed applications or app installation settings.