Suspicious Keyboard Layout Load

SigmaHQ Detections@sigmaHQ

•updated Aug 12, 2024•0•0•1

Detects the keyboard preload installation with a suspicious keyboard layout, e.g. Chinese, Iranian or Vietnamese layout load in user session on systems maintained by US staff only