Findstr Launching .lnk File — Detection Rule

Detects usage of findstr to identify and execute a lnk file as seen within the HHS redirect attack

Read the full analysis on IntelFusions