Network Connection Initiated From Process Located In Potentially Suspicious Or Uncommon Location

SigmaHQ Detections@sigmaHQ

•updated Jun 24, 2026•0•0•0

Detects a network connection initiated by programs or processes running from suspicious or uncommon files system locations.