Executable with Single Character Filename
This rule detects the execution of executables with single-character filenames on Windows systems. Such filenames can be used by adversaries to obfuscate malicious activity, making it harder for users and security tools to identify the true nature of a file. This technique is often employed in malvertising campaigns or other forms of social engineering to trick users into executing seemingly benign files.
CQL
