[New Rule] File Creation in /var/log via Suspicious Process

[New Rule] File Creation in /var/log via Suspicious Process #2448