Uncommon Service Installation Image Path

SigmaHQ Detections@sigmaHQ

•updated Aug 12, 2024•0•0•0

Detects uncommon service installation commands by looking at suspicious or uncommon image path values containing references to encoded powershell commands, temporary paths, etc.