All Detections

Certutil (LOLBins and LOLScripts, Normalized Process Events)

Azure Sentinel@AzureSentinel
updated Jun 17, 2025029

'This detection uses Normalized Process Events to hunt Certutil activities'

Microsoft Sentinel (KQL)