All Detections

Findstr Launching .lnk File

Yamato Security Hayabusa@YamatoSecurityHayabusa
updated Jun 24, 202508

Detects usage of findstr to identify and execute a lnk file as seen within the HHS redirect attack

Sigma