Detects the execution of a renamed "jusched.exe" as seen used by the cobalt group
Already have an account? Log in