Adwind RAT / JRAT — Detection Rule

Detects javaw.exe in AppData folder as used by Adwind / JRAT

Read the full analysis on IntelFusions