File Download via CertOC.EXE — Detection Rule

Detects when a user downloads a file by using CertOC.exe

Read the full analysis on IntelFusions