Windows Processes Suspicious Parent Directory — Detection Rule

Detect suspicious parent processes of well-known Windows processes

Read the full analysis on IntelFusions