Stopping multiple processes using taskkill
This query checks for attempts to stop at least 10 separate processes using the taskkill.exe utility. Run query
Microsoft Sentinel (KQL)

This query checks for attempts to stop at least 10 separate processes using the taskkill.exe utility. Run query

Already have an account?