Product
Community
Enterprise
Plans
Intel Exchange
Intel Exchange
Detections
Resources
About
Leaderboard
Join Community
Sign In
All Detections
MDE KQL to detect UAC bypass of Fickle Stealer
Glass
DiceBear
https://www.dicebear.com
https://creativecommons.org/publicdomain/zero/1.0/
„Glass” (https://www.dicebear.com) by „DiceBear”, licensed under „CC0 1.0” (https://creativecommons.org/publicdomain/zero/1.0/)
Steven Lim
@KQLWizard
•
updated Jul 1, 2025
•
3
•
0
•
35
KQL Query from file: MDE KQL to detect UAC bypass of Fickle Stealer
Microsoft Sentinel (KQL)
Translate
Download
Copy
Sign up to view this detection
Next
or
Create account with Google
Create account with Microsoft
Already have an account?
Log in
