Suspicious Process Start Locations — Detection Rule

Detects suspicious process run from unusual locations

Read the full analysis on IntelFusions