Adwind RAT / JRAT File Artifact — Detection Rule

Detects javaw.exe in AppData folder as used by Adwind / JRAT

Read the full analysis on IntelFusions