Threat: LNK/Shortcut Abuse | Detection.FYI

Downloaded Shortcut Files

Sep 19, 2026 · Domain: Endpoint OS: Windows Use Case: Threat Detection Tactic: Execution Data Source: Elastic Defend Resources: Investigation Guide Noise: Medium Performance: Normal Profile: Recommended Threat: LNK/Shortcut Abuse Rule Type: Event Correlation (EQL) Platform: Windows ·
Share on:

Identifies .lnk shortcut file downloaded from outside the local network. These shortcut files are commonly used in phishing campaigns.

Read More
Downloaded URL Files

Sep 19, 2026 · Domain: Endpoint OS: Windows Use Case: Threat Detection Tactic: Execution Data Source: Elastic Defend Resources: Investigation Guide Noise: Medium Performance: Normal Profile: Recommended Threat: LNK/Shortcut Abuse Rule Type: Event Correlation (EQL) Platform: Windows ·
Share on:

Identifies .url shortcut files downloaded from outside the local network. These shortcut files are commonly used in phishing campaigns.

Read More