Tag
Detection of Windows shell and scripting applications writing files to common staging directories used by threat actors for persistence and lateral movement.