HackTool - Impacket Tools Execution — Detection Rule

Detects the execution of different compiled Windows binaries of the impacket toolset (based on names or part of their names - could lead to false positives)

Read the full analysis on IntelFusions