Detects command line parameters used by Bloodhound and Sharphound hack tools
Read the full analysis on IntelFusions