WinRAR CVE-2025-6218 Detection

A KQL query designed to monitor for potential exploitation of CVE-2025-6218—a directory traversal vulnerability in WinRAR—until the affected infrastructure is fully patched and secured.

Microsoft Sentinel (KQL)