Hide Navigation Hide TOC Suspicious Msiexec Quiet Install From Remote Location (8150732a-0c9d-4a99-82b9-9efb9b90c40c) Detects usage of Msiexec.exe to install packages hosted remotely quietly Cluster A Galaxy A Cluster B Galaxy B Level Suspicious Msiexec Quiet Install From Remote Location (8150732a-0c9d-4a99-82b9-9efb9b90c40c) Sigma-Rules Msiexec - T1218.007 (365be77f-fc0e-42ee-bac8-4faf806d9336) Attack Pattern 1 System Binary Proxy Execution - T1218 (457c7820-d331-465a-915e-42f85500ccc4) Attack Pattern Msiexec - T1218.007 (365be77f-fc0e-42ee-bac8-4faf806d9336) Attack Pattern 2