win:appx
AppX deployment/packaging logs
Channels: Microsoft-Windows-AppXDeploymentServer, AppxPackaging
- Host type
- Windows (workstation, member server, domain controller)
- Techniques
- 0
- Rules listed
- 16
- Events
- 12
Techniques
No ATT&CK analytic names this source.
Rules
Splunk 5
Sigma 11
- AppX Located in Known Staging Directory Added to Deployment Pipeline by Nasreddine Bencherchali (Nextron Systems)
- AppX Located in Uncommon Directory Added to Deployment Pipeline by Nasreddine Bencherchali (Nextron Systems)
- AppX Package Deployment Failed Due to Signing Requirements by Nasreddine Bencherchali (Nextron Systems)
- Deployment AppX Package Was Blocked By AppLocker by frack113
- Deployment Of The AppX Package Was Blocked By The Policy by frack113
- Potential Malicious AppX Package Installation Attempts by Nasreddine Bencherchali (Nextron Systems)
- Remote AppX Package Downloaded from File Sharing or CDN Domain by Nasreddine Bencherchali (Nextron Systems)
- Successful MSIX/AppX Package Installation by Michael Haag, Swachchhanda Shrawan Poudel (Nextron Systems)
- Suspicious Digital Signature Of AppX Package by Nasreddine Bencherchali (Nextron Systems)
- Windows AppX Deployment Full Trust Package Installation by Michael Haag, Swachchhanda Shrawan Poudel (Nextron Systems)
- Windows AppX Deployment Unsigned Package Installation by Michael Haag, Swachchhanda Shrawan Poudel (Nextron Systems)