Detection rules › By eventMicrosoft-Windows-AppXDeployment-Server event 8544 detection rules reference this event. View event page.Sigma (3)AppX Located in Known Staging Directory Added to Deployment Pipeline severity highAppX Located in Uncommon Directory Added to Deployment Pipeline severity mediumRemote AppX Package Downloaded from File Sharing or CDN Domain severity highSplunk (1)Windows AppX Deployment Package Installation Success T1204.002