Network Communication Initiated To File Sharing Domains From Process Located In Suspicious Folder — Detection Rule

Detects executables located in potentially suspicious directories initiating network connections towards file sharing domains.

Read the full analysis on IntelFusions