Conhost.exe CommandLine Path Traversal — Detection Rule

detects the usage of path traversal in conhost.exe indicating possible command/argument confusion/hijacking

Read the full analysis on IntelFusions