examples:

• description: "Execute IBM's pcsnp.exe triggers SYSTEM cmd.exe and observe the unusual behavior" command: "IBM's pcsnp.exe triggers SYSTEM cmd.exe"

IBM's pcsnp.exe triggers SYSTEM cmd.exe

IBM's pcsnp.exe just...what

IBM's pcsnp.exe calls cmd.exe /c mkdir C:\Temp from processes such as mpnotify.exe and lsass.exe. Read the writeup for this; it's amazing.

Contributed by 59e5aaf4