TeamViewer Desktop Installation

This rule detects the creation of 'TeamViewer_Desktop.exe' on a Windows system. This file is typically created during the installation of TeamViewer, a legitimate remote access tool. Adversaries often abuse such tools for command and control, making its installation a potential indicator of compromise.