PDQ Deploy Remote Administration Tool Execution
Detects the execution of the PDQ Deploy Console, which is a remote administration tool. This rule identifies the creation of processes associated with the PDQ Deploy Console based on its description, product name, company, or original file name. This tool can be used for legitimate software deployment but can also be leveraged by adversaries for execution and lateral movement.
Sigma
