Skip to content
Threat Feed
Subscribe

Tag

Inetcache

1 brief RSS
high advisory

Suspicious Execution from INetCache Folder

The rule detects suspicious execution of processes from the INetCache folder, often indicative of malicious payloads delivered via WININET, potentially signaling initial access or command and control activity.

Windows initial-access command-and-control execution inetcache
2r 3t 1c