PUA - Wsudo Suspicious Execution

SigmaHQ Detections@sigmaHQ

•updated Aug 12, 2024•0•0•0

Detects usage of wsudo (Windows Sudo Utility). Which is a tool that let the user execute programs with different permissions (System, Trusted Installer, Administrator...etc)