Terminal Service Process Spawn — Detection Rule
Detects a process spawned by the terminal service server process (this could be an indicator for an exploitation of CVE-2019-0708)
Detects a process spawned by the terminal service server process (this could be an indicator for an exploitation of CVE-2019-0708)