Sigma Rules

Windows Processes Suspicious Parent Directory

Detect suspicious parent processes of well-known Windows processes