All Detections

TypeLib .COM Bypass

avatar
John Bambenek@bambenek
updated Aug 26, 20252266

This detects the registry change needed to perform the TypeLib .COM bypass to execute the identified script let

Microsoft Sentinel (KQL)