Suspicious mshta.exe Execution from Explorer.exe
Detects execution of mshta.exe from explorer.exe with an inline HTA script that reads and executes code from the registry.
Sigma

Detects execution of mshta.exe from explorer.exe with an inline HTA script that reads and executes code from the registry.

Already have an account?