Sponsor of the Day:
Jerkmate
https://detection.fyi/sigmahq/sigma/windows/process_creation/proc_creation_win_powershell_enable_susp_windows_optional_feature/
Potential Suspicious Windows Feature Enabled - ProcCreation | Detection.FYI
Detects usage of the built-in PowerShell cmdlet
potential suspiciouswindows featuredetection fyienabled
https://detection.fyi/sigmahq/sigma/windows/powershell/powershell_script/posh_ps_enable_susp_windows_optional_feature/
Potential Suspicious Windows Feature Enabled | Detection.FYI
Detects usage of the built-in PowerShell cmdlet
potential suspiciouswindows featuredetection fyienabled
https://www.makeuseof.com/thought-pixel-10-pro-screen-defective-turns-out-had-this-feature-enabled/
I thought my Pixel 10 Pro's screen was defective — turns out I just had this feature enabled
Mar 18, 2026 - My Pixel's screen kept acting up. Turns out, nothing was broken, I just had one setting turned on.
pixel 10 profeature enabledthoughtscreendefective
https://detection.fyi/sigmahq/sigma/windows/process_creation/proc_creation_win_reg_enable_windows_recall/
Windows Recall Feature Enabled Via Reg.EXE | Detection.FYI
Detects the enabling of the Windows Recall feature via registry manipulation. Windows Recall can be enabled by deleting the existing …
exe detection fyiwindows recallfeature enabledviareg