Lunar Client Modrinth supply-chain exploit spawning unexpected child process or writing .lnk
Detects anomalous child process creation or .lnk file interaction by the LunarClient process. This rule monitors for indicators of potential supply chain compromise or malicious activity where the gaming client spawns shells, scripting interpreters, or network utilities, or generates shortcut files to facilitate further execution.
SentinelOne
