All Detections

Potential WinAPI Calls Via CommandLine

Yamato Security Hayabusa@YamatoSecurityHayabusa
updated Jun 24, 2025012

Detects the use of WinAPI Functions via the commandline. As seen used by threat actors via the tool winapiexec

Sigma