NetSupport RAT client32.exe Execution Following Browser Process
Detects the execution of the NetSupport RAT client process (client32.exe). This tool is often abused by threat actors for remote control, frequently deployed following social engineering lures such as ClickFix or BitB (Browser-in-the-Browser) attacks.
YARA-L
