AI themed executable launched from browser download path
This rule watches for AI-named programs run straight from the Downloads folder or temporary directories after a web download. Many fake AI scams start exactly this way. If the program then does anything unusual, it may be malware posing as a free AI tool. Ask the person who used the computer whether they installed new software or clicked a link, and involve your security team if the answer is unclear.
Microsoft Sentinel (KQL)
