File Creation In Suspicious Directory By Msdt.EXE

SigmaHQ Detections@sigmaHQ

•updated Oct 23, 2025•0•0•0

Detects msdt.exe creating files in suspicious directories which could be a sign of exploitation of either Follina or Dogwalk vulnerabilities