ManageEngine Endpoint Central Dctask64.EXE Potential Abuse — Detection Rule

Detects the execution of "dctask64.exe", a signed binary by ZOHO Corporation part of ManageEngine Endpoint Central. This binary can be abused for DLL injection, arbitrary command and process execution.

Read the full analysis on IntelFusions