Tag
Detection logic for identifying WinRAR execution from non-standard directories, a technique often used by attackers to stage archives for data collection and exfiltration.