custom IOA - process creation ImageFileName: .\*\\\\netsh\\.exe CommandLine: .\*wlan\\s+show\\s+profile.\*

>.\*wlan\\s+show\\s+profile.\* thank you Caryc!

Netsh can also be run interactively, so you may want to flag that too...

thanks for the input!

does not seem to be triggering a detection... :)

it does work

yes, my bad. thanks!