Potential Recon Activity Using DriverQuery.EXE

SigmaHQ Detections@sigmaHQ

•updated Nov 26, 2025•0•0•0

Detect usage of the "driverquery" utility to perform reconnaissance on installed drivers