Winscp Execution From Non Standard Folder — Detection Rule

Detects the execution of Winscp from an a non standard folder. This could indicate the execution of Winscp portable.