Suspicious Service Creation via WpnUserHost
Detects suspicious service creation or registry modifications involving WpnUserHost that do not reference System32.
Sigma
Detects suspicious service creation or registry modifications involving WpnUserHost that do not reference System32.
Already have an account?