Bitsadmin to Uncommon TLD — Detection Rule

Detects Bitsadmin connections to domains with uncommon TLDs

Read the full analysis on IntelFusions