Suspicious activity

Defender for Cloud: Executable found running from a suspicious location

Risk Level

Informational (4)



Analysis of host data detected an executable file on host that is running from a location in common with known suspicious files. This executable could either be legitimate activity, or an indication of a compromised host.
  • Recommend icon

    Recommended Mitigation

    It is recommended to review the permissions which were used to make this operation.