Faronics Deploy installer masquerading as Adobe-named binary
Detects the execution of a Faronics Deploy installer that has been renamed to mimic Adobe-related software. This technique is often used in phishing campaigns to trick users into executing binaries that lead to the silent installation of remote monitoring tools like ScreenConnect.
Microsoft Sentinel (KQL)
