CodeIntegrity - Blocked Image/Driver Load For Policy Violation

SigmaHQ Detections@sigmaHQ

•updated Oct 23, 2025•0•0•1

Detects blocked load events that did not meet the authenticode signing level requirements or violated the code integrity policy.