HackTool - PCHunter Execution — Detection Rule

Detects suspicious use of PCHunter, a tool like Process Hacker to view and manipulate processes, kernel options and other low level stuff

Read the full analysis on IntelFusions