PowerShell WMI Win32_Product Install MSI

SigmaHQ Detections@sigmaHQ

•updated Sep 3, 2026•0•0•1

Detects the execution of an MSI file using PowerShell and the WMI Win32_Product class