Remote Thread Creation By Uncommon Source Image — Detection Rule

Detects uncommon processes creating remote threads.

Read the full analysis on IntelFusions