Alexandru Enache

@alx91989
0 followers0 downloads32 copies0 likes290 views

2 detections

Detects instances where 7-Zip utility processes (7z.exe, 7zFM.exe, 7zG.exe) or DLLs act as the parent for suspicious child processes such as command interpreters (cmd.exe, powershell.exe) or other binaries running from temporary or download directories. This pattern is commonly associated with the execution of malicious payloads extracted or staged via 7-Zip archives.
Alexandru Enache@alx91989
avatar
Detections.ai Community
3 months ago
22030
Inventory check to find hosts still exposed to CVE-2026-34621.
VULNERABLE ADOBE ACROBAT / READER VERSIONS ON FLEET
Alexandru Enache@alx91989
avatar
Detections.ai Community
6 months ago
100260