BITS Job File Download via bitsadmin.exe (T1197)
Detects the use of bitsadmin.exe to initiate file transfers, downloads, or file additions using HTTP protocols. This utility is frequently abused by adversaries for Ingress Tool Transfer by downloading malicious payloads from remote systems.
SentinelOne
