Remote AppX Package Downloaded from File Sharing or CDN Domain

SigmaHQ Detections@sigmaHQ

•updated Jun 24, 2026•0•0•0

Detects an appx package that was added to the pipeline of the "to be processed" packages which was downloaded from a file sharing or CDN domain.