PUA - NirCmd Execution — Detection Rule
Detects the use of NirCmd tool for command execution, which could be the result of legitimate administrative activity
Detects the use of NirCmd tool for command execution, which could be the result of legitimate administrative activity