Process Start From Suspicious Folder

Detects process start from rare or uncommon folders like temporary folder or folders that usually don't contain executable files