Remote File Download Via Desktopimgdownldr Utility
Detects the use of the built-in Windows utility `desktopimgdownldr.exe` to download remote files. This utility can be abused by adversaries as an alternative method for ingress tool transfer, similar to `certutil.exe`.
Sigma
