PUA - AdvancedRun Suspicious Execution — Detection Rule

Detects the execution of AdvancedRun utility in the context of the TrustedInstaller, SYSTEM, Local Service or Network Service accounts

Read the full analysis on IntelFusions