HackTool - SharPersist Execution — Detection Rule

Detects the execution of the hacktool SharPersist - used to deploy various different kinds of persistence mechanisms

Read the full analysis on IntelFusions