Whoami.EXE Execution From Privileged Process
Detects the execution of "whoami.exe" by privileged accounts that are often abused by threat actors
Sigma
Detects the execution of "whoami.exe" by privileged accounts that are often abused by threat actors
Already have an account?