Forest Blizzard APT - Process Creation Activity — Detection Rule

Detects the execution of specific processes and command line combination. These were seen being created by Forest Blizzard as described by MSFT.