New PDQDeploy Service Installation - Client Side

SigmaHQ Detections@sigmaHQ

•updated Oct 23, 2025•0•47

Detects the installation of a PDQDeploy service on a target system. When a package is deployed via PDQDeploy, it installs a remote service named "PDQDeployRunner-X" (where X is an integer) on the target machine.