AnyDesk Install/Execution Following Browser Download (Vishing Chain)
This rule detects the execution of the AnyDesk remote access tool shortly after its likely download via Microsoft Edge. This pattern is commonly associated with social engineering vishing attacks where an adversary directs a user to download and run remote access software.
YARA-L
