All Detections

PUA - AdvancedRun Suspicious Execution

Yamato Security Hayabusa@YamatoSecurityHayabusa
updated Jun 24, 2025014

Detects the execution of AdvancedRun utility in the context of the TrustedInstaller, SYSTEM, Local Service or Network Service accounts

Sigma