All Detections

DLLHost.exe WMIC domain discovery

Azure Sentinel@AzureSentinel
updated Jun 17, 20251011

Identify dllhost.exe using WMIC to discover additional hosts and associated domain.

Microsoft Sentinel (KQL)