All Detections

Suspicious Certreq Command to Download

Yamato Security Hayabusa@YamatoSecurityHayabusa
updated Jun 24, 2025011

Detects a suspicious certreq execution taken from the LOLBAS examples, which can be abused to download (small) files

Sigma