Suspicious Dump64.exe Execution (129966c9-de17-4334-a123-8b58172e664d)
Detects when a user bypasses Defender by renaming a tool to dump64.exe and placing it in a Visual Studio folder
Detects when a user bypasses Defender by renaming a tool to dump64.exe and placing it in a Visual Studio folder