Sysinternals PsSuspend Execution
Detects the execution of Sysinternals PsSuspend, a utility that can be used to suspend running processes. This tool can be abused by adversaries to halt critical security processes or other applications, potentially for evasion or to facilitate further malicious activity.
Sigma
