Suspicious HWP Sub Processes — Detection Rule

Detects suspicious Hangul Word Processor (Hanword) sub processes that could indicate an exploitation

Read the full analysis on IntelFusions