PsExec Command Line Execution
This rule detects the execution of PsExec via the command line on Windows systems. PsExec is a legitimate Microsoft tool that allows administrators to execute processes on remote systems, but it is also frequently abused by adversaries for lateral movement and remote execution within a compromised network.
YARA-L
