面向系统、网络、安全与运维管理员的实用工具。

SEC-0274

Microsoft Sentinel Unusual Parent-Child Process Detection Generator

Generate a tuned Microsoft Sentinel detection for unusual parent-child process with field mapping and false-positive guidance

Updated 25 October 2026