Remote File Download Via Desktopimgdownldr Utility

SigmaHQ Detections@sigmaHQ

•updated Aug 12, 2024•0•0•0

Detects the desktopimgdownldr utility being used to download a remote file. An adversary may use desktopimgdownldr to download arbitrary files as an alternative to certutil.