Antivirus - Relevant File Paths Alerts Signature

SigmaHQ Detections@sigmaHQ

•updated Jul 1, 2026•2•0•1

Detects an Antivirus alert in a highly relevant file path or with a relevant file name. This event must not be ignored just because the AV has blocked the malware but investigate, how it came there in the first place.