LoFP / T1011

T1011

Title	Tags
some legitimate system or security tools may run from these folders and create network connections. review and allow trusted processes to reduce false positives.	T1011 endpoint splunk