1 rule found for "(Security Risk Advisors) - rule; Teymur Kheirkhabarov"
Detects MMC20.Application Lateral Movement; specifically looks for the spawning of the parent MMC.exe with a command line of "-Embedding" as a child of svchost.exe