Rule Info
Name
Suspicious Digital Signature Of AppX Package
Description
Detects execution of AppX packages with known suspicious or malicious signature
Reference
Internal Research
Modified
None
Date
2023-01-16 00:00:00
Author
Nasreddine Bencherchali (Nextron Systems)
Tags
attack.defense_evasion DEMO attack.execution
Id
b5aa7d60-c17e-4538-97de-09029d6cd76b
Type
Community Rule
Link to Public Repo
Scan your endpoints, forensic images or collected files with our portable scanner THOR