High Volume File Creation in Source Directories
This rule detects an unusually high number of file creations (50 or more within an hour) in folders whose paths contain 'source' or 'src'. This activity is grouped by the initiating process and could indicate various activities such as software compilation, deployment, or potentially malicious actions involving rapid file generation in development-related directories.
Microsoft Sentinel (KQL)
