Windows AppX Deployment Full Trust Package Installation

SigmaHQ Detections@sigmaHQ

•updated Sep 3, 2026•3•0•13

Detects the installation of MSIX/AppX packages with full trust privileges which run with elevated privileges outside normal AppX container restrictions