Tap Driver Installation - Security — Detection Rule

Detects the installation of a well-known TAP driver service. This could be a sign of potential preparation for data exfiltration using tunnelling techniques.

Read the full analysis on IntelFusions