Arbitrary File Download Via PresentationHost.EXE (b124ddf4-778d-418e-907f-6dd3fc0d31cd)
Detects usage of "PresentationHost" which is a utility that runs ".xbap" (Browser Applications) files to download arbitrary files
| Cluster A | Galaxy A | Cluster B | Galaxy B | Level |
|---|---|---|---|---|
| Arbitrary File Download Via PresentationHost.EXE (b124ddf4-778d-418e-907f-6dd3fc0d31cd) | Sigma-Rules | System Binary Proxy Execution - T1218 (457c7820-d331-465a-915e-42f85500ccc4) | Attack Pattern | 1 |