Java JAR process setting Microsoft Defender exclusions (Weedhack behavior)
Detects Java processes spawning PowerShell or Command Prompt to modify Windows Defender settings by adding exclusions for sensitive paths or extensions (such as AppData, Temp, Users Public, or ProgramData).
Splunk (SPL)
