1 rule found for "Angelo Violetti - SEC Consult"
Detects LOLBINs executing from an abnormal or uncommon drive such as a mounted ISO.