Detect Outbound SMB Traffic
File Transfer Protocols, Application Layer Protocol
File Transfer Protocols, Application Layer Protocol
Archive via Utility, Archive Collected Data
Command and Scripting Interpreter, PowerShell, Ingress Tool Transfer
InstallUtil, System Binary Proxy Execution
Parent PID Spoofing, Access Token Manipulation