All Detections

Argamal COM Hijacking Persistence

avatar
Ankit Mehta@Secvyn
updated Jun 30, 2026000

Detects COM object hijacking through InprocServer32 modifications. Argamal establishes persistence using COM hijacking mechanisms.

Microsoft Sentinel (KQL)