All Detections

Potential WmiPrvSE Service Installation

avatar
Arnold Chan@slaz
updated 29 days ago000

Detects suspicious service installation patterns involving WmiPrvSE, common in lateral movement techniques.

Sigma