Unattend.XML File Access Attempt — Detection Rule
Detects attempts to access the "unattend.xml" file, where credentials might be stored. This file is used during the unattended windows install process.
Detects attempts to access the "unattend.xml" file, where credentials might be stored. This file is used during the unattended windows install process.