Threat Research

Detects the execution of a child process through "conhost.exe" using the "--headless" flag. The "--headless" flag suppresses the display of any windows, keeping the process hidden from the user....