Suspicious File Drop by Exchange — Detection Rule

Detects suspicious file type dropped by an Exchange component in IIS

Read the full analysis on IntelFusions