Potentially Suspicious Execution From Tmp Folder — Detection Rule

Detects a potentially suspicious execution of a process located in the '/tmp/' folder

Read the full analysis on IntelFusions