id: 627bc1e3-7961-4d77-96df-915627f8c3fc
description: N/A
date: 2025-10-24
author: SigmaHQ Team
rule_metadata:
    - id: 68c8acb4-1b60-4890-8e82-3ddf7a6dba84
      title: HH.EXE Execution
regression_tests_info:
    - name: Positive Detection Test
      type: evtx
      provider: Microsoft-Windows-Sysmon
      path: regression_data/rules/windows/process_creation/proc_creation_win_hh_chm_execution/68c8acb4-1b60-4890-8e82-3ddf7a6dba84.evtx
