Suspicious Execution of Systeminfo — Detection Rule

Detects usage of the "systeminfo" command to retrieve information

Read the full analysis on IntelFusions