Process Launched With Malformed Image Path
Detects the creation of processes where the image name ends with '.exe' but the full path is missing or malformed, indicating an attempt to evade image-based detections. This can be used by adversaries to masquerade malicious processes.
Sigma
