Detects potentially malicious AteraAgent installations when the IntegratorLogin parameter is used to register a non-business email.

Detects Executables in the Downloads folder without FileVersion,Description,Product,Company likely created with py2exe

Detect run not allowed files. Applocker is a very useful tool, especially on servers where unprivileged users have access. For example terminal servers. You need configure applocker and log collect to receive these events.