Suspicious Realtek Script Execution
Detects execution of scripts using exact names mapped to the AsyncRAT infection chain. These script names are associated with malicious activity often disguised as legitimate Realtek audio components.
Microsoft Sentinel (KQL)
