HackTool - CrackMapExec Execution — Detection Rule

This rule detect common flag combinations used by CrackMapExec in order to detect its use even if the binary has been replaced.

Read the full analysis on IntelFusions