HackTool - PPID Spoofing SelectMyParent Tool Execution — Detection Rule

Detects the use of parent process ID spoofing tools like Didier Stevens tool SelectMyParent

Read the full analysis on IntelFusions