Legitimate Application Dropped Script

SigmaHQ Detections@sigmaHQ

•updated Jul 1, 2026•0•0•0

Detects LOLBINs and applications that should not legitimately drop script files to disk. This may indicate malware staging or abuse of a trusted binary for script-based code execution.