Whoami.EXE Execution Anomaly — Detection Rule

Detects the execution of whoami.exe with suspicious parent processes.

Read the full analysis on IntelFusions