Query
Look for files running outside Windows systems folders with name masquerading
LogScale · Detection & Monitoring · v1 · @sebastian · 25.7.2026
Community LogScale query imported from CrowdStrike/logscale-community-content. Source file: Queries-Only/Helpful-CQL-Queries/Look for files running outside Windows systems folders with name masquerading.md. Origin URL: https://github.com/CrowdStrike/logscale-community-content/blob/main/Queries-Only/Helpful-CQL-Queries/Look%20for%20files%20running%20outside%20Windows%20systems%20folders%20with%20name%20masquerading.md
DetectionEndpointWindows
Query contentv1
Download v1Loading editor…
Version history
Every save keeps the previous content. Open any version to view or download it.