G13 kernel driver expanded target discovery via unsigned/non-system process enumeration
Detects G13's expanded target discovery via unsigned/non-SYSTEM process enumeration that also covers services, broadening target discovery beyond the original hard-coded security-product process list.
Microsoft Sentinel (KQL)

