Fake GTA6 installer dropping branded executables, BAT and VBS into TEMP
Detects execution of gta6installer.exe creating branded files in the TEMP directory (such as batch scripts, VBScripts, and executables) or spawning child processes from the TEMP directory.
Splunk (SPL)
