Detects the execution of well known tools that can be abused for data exfiltration and tunneling.
Read the full analysis on IntelFusions