Touch Suspicious Service File — Detection Rule

Detects usage of the "touch" process in service file.

Read the full analysis on IntelFusions