Windows AppX Deployment Unsigned Package Installation

SigmaHQ Detections@sigmaHQ

•updated Sep 3, 2026•0•0•0

Detects attempts to install unsigned MSIX/AppX packages using the -AllowUnsigned parameter via AppXDeployment-Server events