Detect Executable Files in C:\Users\Public

Kenji Choy@kchoy

•updated Jul 4, 2026•14•0•19

This query is designed to identify unusual executable files that are created in the C:\Users\Public directory and its subdirectories. This location is not typically used for storing executable files, so any files found here should be investigated as they might indicate malicious activity