Potentially Suspicious Electron Application CommandLine

SigmaHQ Detections@sigmaHQ

•updated Oct 1, 2024•0•0•0

Detects potentially suspicious CommandLine of electron apps (teams, discord, slack, etc.). This could be a sign of abuse to proxy execution through a signed binary.