JXA In-memory Execution Via OSAScript — Detection Rule

Detects possible malicious execution of JXA in-memory via OSAScript

Read the full analysis on IntelFusions