Password Protected Compressed File Extraction Via 7Zip — Detection Rule

Detects usage of 7zip utilities (7z.exe, 7za.exe and 7zr.exe) to extract password protected zip files.

Read the full analysis on IntelFusions