Contributed By: Dray Agha (@purp1ew0lf)
The executable for Network Detective Data Collector displays false positive activity similar to Impacket's WMI/SMBexec.