Detection rules › By eventMicrosoft-Windows-Sysmon event 22 detection rules reference this event. View event page.Sigma (1)Unusual File Modification by dns.exe severity high T1133 Elastic (1)Potential Timestomp in Executable Files T1070, T1070.006