Suspicious Process Execution From Fake Recycle Bin Folder
Detects process execution from a fake recycle bin folder, which is a common technique used by adversaries to evade security solutions and hide malicious executables. The rule specifically looks for process images (executables) located within paths containing 'RECYCLERS.BIN\' or 'RECYCLER.BIN\'.
Sigma
