Msiexec Executing a PDF File
Detects msiexec.exe attempting to install a package with a .pdf extension. Adversaries may disguise malicious MSI installers as PDF files to evade detection and trick users.
Microsoft Sentinel (KQL)
Detects msiexec.exe attempting to install a package with a .pdf extension. Adversaries may disguise malicious MSI installers as PDF files to evade detection and trick users.
Already have an account?