File With Suspicious Extension Downloaded Via Bitsadmin — Detection Rule

Detects usage of bitsadmin downloading a file with a suspicious extension

Read the full analysis on IntelFusions