Local File Read Using Curl.EXE

SigmaHQ Detections@sigmaHQ

•updated Dec 25, 2025•0•0•0

Detects execution of "curl.exe" with the "file://" protocol handler in order to read local files.