Bindutil Execution Creating Bind Links via Link or Silo Flags
Detects the execution of bindutil.exe with arguments typically used to establish links or silo configurations, excluding known legitimate parent processes associated with container and virtualization services.
Sigma
