Script Event Consumer Spawning Process — Detection Rule

Detects a suspicious child process of Script Event Consumer (scrcons.exe).

Read the full analysis on IntelFusions