File Download Via Bitsadmin To A Suspicious Target Folder — Detection Rule

Detects usage of bitsadmin downloading a file to a suspicious target folder

Read the full analysis on IntelFusions