Skip to content

Add detection for PnPUtil driver and device removal activity#6099

Open
Kvvvvvvvvv wants to merge 2 commits into
SigmaHQ:masterfrom
Kvvvvvvvvv:add-pnputil-driver-device-removal-rule
Open

Add detection for PnPUtil driver and device removal activity#6099
Kvvvvvvvvv wants to merge 2 commits into
SigmaHQ:masterfrom
Kvvvvvvvvv:add-pnputil-driver-device-removal-rule

Conversation

@Kvvvvvvvvv

Copy link
Copy Markdown

Summary of the Pull Request

Changelog

Example Log Event

Fixed Issues

SigmaHQ Rule Creation Conventions

  • If your PR adds new rules, please consider following and applying these conventions

@github-actions github-actions Bot added Rules Review Needed The PR requires review Windows Pull request add/update windows related rules labels Jul 1, 2026

@github-actions github-actions Bot left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Welcome @Kvvvvvvvvv 👋

It looks like this is your first pull request on the Sigma rules repository!

Please make sure to read the SigmaHQ conventions to make sure your contribution is adhering to best practices and has all the necessary elements in place for a successful approval.

Thanks again, and welcome to the Sigma community! 😃

If you want to engage more with the community for official support, general discussions or announcements:

👉 Join our Discord server

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Review Needed The PR requires review Rules Windows Pull request add/update windows related rules

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant