New PDQDeploy Service - Server Side — Detection Rule

Detects a PDQDeploy service installation which indicates that PDQDeploy was installed on the machines. PDQDeploy can be abused by attackers to remotely install packages or execute commands on target machines

Read the full analysis on IntelFusions