Potential PlugX Activity — Detection Rule

Detects the execution of an executable that is typically used by PlugX for DLL side loading starting from an uncommon location

Read the full analysis on IntelFusions