Custom File Open Handler Executes PowerShell — Detection Rule

Detects the abuse of custom file open handler, executing powershell

Read the full analysis on IntelFusions