Remote Installation Msiexec

Detects a potential remote installation of application through http. Look for suspicious parent processes or unusual application installs.

YARA