Writing Of Malicious Files To The Fonts Folder

SigmaHQ Detections@sigmaHQ

•updated Apr 28, 2026•0•0•0

Monitors for the hiding possible malicious files in the C:\Windows\Fonts\ location. This folder doesn't require admin privillege to be written and executed from.