Sliver C2 Default Service Installation — Detection Rule

Detects known malicious service installation that appear in cases in which a Sliver implants execute the PsExec commands

Read the full analysis on IntelFusions