Potential Cryptojacking Payload Execution via RuntimeHost
Detects RuntimeHost.exe launched from an unusual cache directory frequently associated with malware staging and cryptomining activity.
Microsoft Sentinel (KQL)
Detects RuntimeHost.exe launched from an unusual cache directory frequently associated with malware staging and cryptomining activity.
Already have an account?