Detection rules › By eventMicrosoft-Windows-Sysmon event 271 detection rule reference this event. View event page.Sigma (1)Sysmon Blocked Executable severity high