Process Discovery — Detection Rule

Detects process discovery commands. Adversaries may attempt to get information about running processes on a system. Information obtained could be used to gain an understanding of common software/applications running on systems within the network

Read the full analysis on IntelFusions