DriverQuery.EXE Execution

SigmaHQ Detections@sigmaHQ

•updated Nov 26, 2025•0•0•1

Detect usage of the "driverquery" utility. Which can be used to perform reconnaissance on installed drivers