Detection rules › By eventMicrosoft-Windows-Bits-Client event 164035 detection rules reference this event. View event page.Sigma (5)BITS Transfer Job Download From Direct IP severity high T1197 BITS Transfer Job Download From File Sharing Domains severity high T1197 BITS Transfer Job Download To Potential Suspicious Folder severity high T1197 BITS Transfer Job Downloading File Potential Suspicious Extension severity medium T1197 BITS Transfer Job With Uncommon Or Suspicious Remote TLD severity medium T1197