Add Insecure Download Source To Winget

SigmaHQ Detections@sigmaHQ

•updated Apr 28, 2026•0•0•1

Detects usage of winget to add a new insecure (http) download source. Winget will not allow the addition of insecure sources, hence this could indicate potential suspicious activity (or typos)