LoFP LoFP / t1614

t1614

TitleTags
discord was seen using chcp to look up code pages
during anaconda update the 'conda.exe' process will eventually execution the 'chcp' command.
if the domains listed in this rule are used as part of an authorized workflow, this rule will be triggered by those events. validate that this is expected activity and tune the rule to fit your environment variables.