Potential Suspicious Activity Using SeCEdit

SigmaHQ Detections@sigmaHQ

•updated Apr 28, 2026•0•0•3

Detects potential suspicious behaviour using secedit.exe. Such as exporting or modifying the security policy