Potentially Suspicious Ping/Copy Command Combination — Detection Rule

Detects uncommon and potentially suspicious one-liner command containing both "ping" and "copy" at the same time, which is usually used by malware.

Read the full analysis on IntelFusions