Potentially Suspicious Usage Of Qemu (5fc297ae-25b6-488a-8f25-cc12ac29b744)
Detects potentially suspicious execution of the Qemu utility in a Windows environment. Threat actors have leveraged this utility and this technique for achieving network access as reported by Kaspersky.