Detects remote thread creation from CACTUSTORCH as described in references.
Read the full analysis on IntelFusions