Suspicious Child Process Of Wermgr.EXE — Detection Rule

Detects suspicious Windows Error Reporting manager (wermgr.exe) child process

Read the full analysis on IntelFusions