FFmpeg RASC/DLTA Codec ACE - Unexpected Child Process from ffmpeg/ffplay
Detects anomalous child process creation from FFmpeg-related binaries (ffmpeg, ffplay, ffprobe) indicative of arbitrary code execution stemming from memory corruption vulnerabilities in the RASC/DLTA codec handler.
Microsoft Sentinel (KQL)

