Detection rules › By eventMsiInstaller event 10402 detection rules reference this event. View event page.Sigma (2)MSI Installation From Suspicious Locations severity mediumMSI Installation From Web severity medium T1218, T1218.007