Renamed Plink Execution — Detection Rule

Detects the execution of a renamed version of the Plink binary

Read the full analysis on IntelFusions