AppX Package Installation Attempts Via AppInstaller.EXE — Detection Rule
Detects DNS queries made by "AppInstaller.EXE". The AppInstaller is the default handler for the "ms-appinstaller" URI. It attempts to load/install a package from the referenced URL