BITS Job Abuse via bitsadmin.exe Transfer or Notify Execution
Detects the use of the BITSAdmin utility to transfer files or set notification command lines. BITSAdmin is a legitimate Windows utility often abused by adversaries to download malicious files or achieve persistence/execution via BITS jobs.
Microsoft Sentinel (KQL)
