Renamed SysInternals DebugView Execution
Detects the execution of SysInternals DebugView when its executable name has been renamed from the original 'Dbgview.exe'. This can indicate an attempt to evade detection or obscure the use of the tool by an adversary.
Sigma
