Network Command from Suspicious Location

Detects network commands executed from suspicious directories. Loose Sigma equivalent to SPL Detection at https://detections.ai/rules/019b06c7-03a3-72ac-a9c8-11b0482d8db7