Suspicious Service Binary Directory — Detection Rule

Detects a service binary running in a suspicious directory

Read the full analysis on IntelFusions