New PDQDeploy Service - Server Side

SigmaHQ Detections@sigmaHQ

•updated Oct 23, 2025•0•0•1

Detects a PDQDeploy service installation which indicates that PDQDeploy was installed on the machines. PDQDeploy can be abused by attackers to remotely install packages or execute commands on target machines