Potential Dropper Script Execution Via WScript/CScript/MSHTA

SigmaHQ Detections@sigmaHQ

•updated Apr 27, 2026•1•0•1

Detects wscript/cscript/mshta executions of scripts located in user directories