All Detections

Local Privilege Escalation Indicator TabTip

avatar
SigmaHQ Detections@sigmaHQ
updated Oct 23, 2025000

Detects the invocation of TabTip via CLSID as seen when JuicyPotatoNG is used on a system in brute force mode

Sigma